Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4.0: 5.8 (medium) CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P Affected versions: - Apache OpenOffice through 4.1.16 Description: A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVE-2026-59267: Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/498
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Ghostunnel: Open-source TLS proxy with mutual authentication
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a…
Rails security releases: 8.0.5.2 and 8.1.4.1
Posted by Mike Dalessio on Nov 03 Rails Versions 8.0.5.2 and 8.1.4.1 have been released. These are **security updates** addressing 21 security issues. We strongly…
Fixed Detectors, Moving Code: How Well Do Static Security Analyzers Hold Up over a Decade of C/C++ Evolution?
arXiv:2611.03742v1 Announce Type: new Abstract: Static application security testing (SAST) tools are often deployed on the assumption that detectors configured today…
When Debate Amplifies Risk: Social-Bias Vulnerabilities in Multi-Agent Safety Deliberation
arXiv:2611.04289v1 Announce Type: new Abstract: Retrieval-augmented Web applications increasingly employ multi-agent debate (MAD) to aggregate conflicting, noisy, and…
CGI versions before 5.00 for Perl (20 CVEs)
Posted by Stig Palmquist on Nov 03 CVE-2026-120631 CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used…
CVE-2026-90634: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An uncontrolled memory access in the PDF…