{"id":"CVE-2026-90624","kind":"vulnerability","aliases":["CVE-2026-90624"],"related":[],"title":"Apache OpenOffice: crafted PDF import causes out-of-bounds memory write","description":"An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","summary":"Apache OpenOffice up to 4.1.16 has an unchecked memory access in its PDF import code. A crafted PDF can trigger an out-of-bounds memory write that crashes the program or corrupts memory.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apache-openoffice","desktop","package","pdf-import"],"not_affected_if":["newer-version","no-pdf-import"],"how_to_check":"- Check the installed OpenOffice version via Help > About (or the version shown in the install directory); versions through `4.1.16` are affected.","fix":"- Apache OpenOffice: upgrade to `4.1.17`.","status":"open","published_at":"2026-11-04T11:17:18+00:00","first_seen_at":"2026-11-04T11:26:46+00:00","triaged_at":"2026-11-04T11:27:44+00:00","updated_at":"2026-11-04T11:27:44+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-04T11:27:44Z","model":"claude-haiku-5-5","output":{"fix":"- Apache OpenOffice: upgrade to `4.1.17`.","reach":"local","title":"Apache OpenOffice: crafted PDF import causes out-of-bounds memory write","impact":"medium","summary":"Apache OpenOffice up to 4.1.16 has an unchecked memory access in its PDF import code. A crafted PDF can trigger an out-of-bounds memory write that crashes the program or corrupts memory.","audience":"everyone","category":"package","nicknames":[],"who_cares":["apache-openoffice","desktop","pdf-import"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Program crashes or memory corruption from a crafted PDF file","analyst_note":"","how_to_check":"- Check the installed OpenOffice version via Help > About (or the version shown in the install directory); versions through `4.1.16` are affected.","plain_action":"Update Apache OpenOffice to version 4.1.17 and avoid opening PDF files from unknown sources until you have.","needs_analyst":false,"not_affected_if":["no-pdf-import","newer-version"],"who_is_affected":"Anyone running Apache OpenOffice 4.1.16 or earlier on the affected platform who imports PDF files. The risk comes from opening a crafted PDF, so systems that never import PDFs into OpenOffice are unlikely to be exposed.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000674,"input_tokens":4127,"output_tokens":523,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-90624':15A,18A '4.1.16':31B,75C '4.1.17':106C 'access':36B,64C 'allow':77C 'apach':1A,20B,27B,71C 'apache-openoffic':19B 'bound':10A,51B,87C 'caus':6A,96C 'code':41B,69C 'corrupt':59B,98C 'could':91C 'craft':3A,43B,79C 'crash':55B,92C 'cve':13A,16A 'desktop':22B 'execut':82C 'fix':108C 'import':5A,26B,40B,68C 'issu':110C 'memori':11A,35B,52B,60B,63C,88C,97C 'openoffic':2A,21B,28B,72C 'out-of-bound':7A,48B,84C 'packag':23B 'pdf':4A,25B,39B,44B,67C,80C 'pdf-import':24B 'program':57B,94C 'recommend':101C 'trigger':46B 'uncheck':34B,62C 'upgrad':103C 'user':99C 'version':73C,105C 'write':12A,53B,89C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Apache OpenOffice 4.1.16 or earlier on the affected platform who imports PDF files. The risk comes from opening a crafted PDF, so systems that never import PDFs into OpenOffice are unlikely to be exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Apache OpenOffice to version 4.1.17 and avoid opening PDF files from unknown sources until you have.","pkeys":[],"ptokens":[],"labels":["apacheopenoffice","desktop","medium","package","pdfimport"],"campaign_type":null,"first_public_at":"2026-11-04T11:17:18+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-90624","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90624","severity":null,"published_at":"2026-11-04T11:17:18+00:00","modified_at":"2026-11-04T11:17:18+00:00","first_seen_at":"2026-11-04T11:26:46+00:00","fetched_at":"2026-11-04T11:26:46+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}