You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@openoffice.apache.org by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:38:18 UTC

CVE-2025-64406: Apache OpenOffice: Possible memory corruption during CSV import

Severity: important 

Affected versions:

- Apache OpenOffice through 4.1.15

Description:

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.

Credit:

Damjan Jovanovic for discovering, reporting and fixing the issue (finder)

References:

https://www.openoffice.org/security/cves/CVE-2025-64406.html
https://openoffice.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-64406