high
advisory
Apache OpenOffice: Heap buffer overflow in Draw component (CVE-2026-59267)
A heap buffer overflow in the Draw component of Apache OpenOffice 4.1.16 and earlier can be triggered by a crafted DXF document, potentially causing a crash or memory corruption.
CVE search metadata
CVE search record: CVE-2026-59267. Severity: high. CVSS: 7.8. KEV: no. Product: cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*. Brief: Apache OpenOffice: Heap buffer overflow in Draw component (CVE-2026-59267). Brief link: https://feed.craftedsignal.io/briefs/2026-11-apache-openoffice-heap-overflow/
Triage facts
Revision 1- Applicability
- cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 4, 18:50 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A crafted DXF document causes a heap buffer overflow in the Draw component of Apache OpenOffice 4.1.16 and earlier. This vulnerability could cause an application crash or corruption of memory areas. Users are recommended to upgrade to version 4.1.17.