Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-90624

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on…

Risk score
44/100
CVSS
7.3 v3.1
Published
4 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is
An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected
See advisory
Fix
Upgrade the product to 4.1.17 or later.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 7.3 high

References

Original description

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Last activity 4 Nov 2026. Patch Forecast updates every hour.