{"id":"CVE-2026-90629","published":"2026-11-04T11:17:19.470","lastModified":"2026-11-05T05:18:39.717","description":"An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","cvssScore":7.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cwes":["CWE-787"],"vendors":["apache"],"products":["openoffice"],"references":[{"url":"https://lists.apache.org/thread.html/lbmfms02205zbpwq3pm39qrx4m1czy2k","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/03/29","tags":["Mailing List","Third Party Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}