CVE-2026-90626

EUVD-2026-116875
An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
7.3 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
apacheopenoffice
𝑥
≤ 4.1.16
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://lists.apache.org/thread.html/n2qgb44t8lom9s9z4xwqs3dt3mx0cggy
http://www.openwall.com/lists/oss-security/2026/11/03/26