CVE-2026-90628 · Package
NO FIX YET · SEE WHAT TO DO
A crafted CFF font inside a document causes a stack overflow in the PDF export code of Apache OpenOffice up to 4.1.16. The overflow can crash the program, corrupt memory, or let an attacker run other code.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Anyone who exports documents to PDF in Apache OpenOffice 4.1.16 or earlier, especially when opening untrusted files that contain embedded CFF fonts. Exposure comes from the PDF export path processing the font, so systems that do not run OpenOffice or never export PDFs from it can skip it.
Not affected if no-untrusted-documents, not-using-openoffice
Who cares desktop, openoffice, pdf-export
4.1.16 on workstations and build hosts4.1.17An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.