Apache Openoffice: heap buffer overflow can lead to denial of service

At a glance

Apache Openoffice: Yellow, plan it in. A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

The flaws

• CVE-2026-59267: Heap buffer overflow can lead to denial of service (CVSS 7.8)
• CVE-2026-90628: Stack buffer overflow can lead to denial of service (CVSS 7.3)
• CVE-2026-90629: Out-of-bounds write can lead to denial of service (CVSS 7.3)
• CVE-2026-90634: Out-of-bounds write can lead to denial of service (CVSS 7.3)

The fix

Upgrade Apache Openoffice: 4.1.17 or later on your release line

Who is exposed: Apache Openoffice before 4.1.17

Where it stands

• No known exploitation

Connects to

• Same weakness: Heap buffer overflow (CWE-122). 399 other warnings in 30 days
• Same product: Earlier Apache Openoffice warnings. 3 in the last 90 days