{"id":"CVE-2026-90634","published":"2026-11-04T11:17:19.840","lastModified":"2026-11-05T05:18:39.920","description":"An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","cvssScore":7.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cwes":["CWE-787"],"vendors":["apache"],"products":["openoffice"],"references":[{"url":"https://lists.apache.org/thread.html/1c0lropx46w8ozwk29p5yw1xlq4wnbll","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/03/32","tags":["Mailing List","Third Party Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}