5.8 Medium

CVE-2026-59267 Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption

Description

A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

CVSS 4.0 detail

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: High
Attack requirements: None
Privileges required: None
Interaction: Passive
Confidentiality: High
Integrity: High
Availability: High
Confidentiality of other systems: High
Integrity of other systems: High
Availability of other systems: High

Affected products and versions

Product	Affected versions	Fixed in
Apache OpenOffice 4.1	earliest → 4.1.16	No fix stated

References

lists.apache.org lists.apache.org

Timeline

Published November 4, 2026
Last modified November 5, 2026

The 39 CVEs of Apache OpenOffice →

CVE-2026-90632 Apache OpenOffice: Local file inclusion via GStreamer plugin Not rated CVE-2026-90634 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files Not rated CVE-2026-90631 Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables Not rated CVE-2026-90629 Apache OpenOffice: Out of bounds memory access during WMF import Not rated

Track this CVE