← CVE index
Vulnerability record/PUBLISHED/Published Nov 4, 2026 11:03:41 UTC

CVE-2026-90628

An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Base scoreN/A/ 10
SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityNone
No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityapache
Last updatedNov 4, 2026 11:03:41 UTC
PublishedNov 4, 2026 11:03:41 UTC
ReservedSep 12, 2026 20:49:33 UTC

Credits

  • Anthropic and Ada Logics