{"id":"CVE-2026-90628","published":"2026-11-04T11:17:19.347","lastModified":"2026-11-05T05:18:39.507","description":"An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code.\n\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","cvssScore":7.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cwes":["CWE-121"],"vendors":["apache"],"products":["openoffice"],"references":[{"url":"https://lists.apache.org/thread.html/15onpdrzqny5y5qtmdv4lnvptxlvmg05","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/03/28","tags":["Mailing List","Third Party Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}