PT-2026-116638 · Wvware Wv+1 · Wvware Wv+1
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
wvWare wv versions prior to 1.3.0
Description
A stack-based out-of-bounds read occurs due to an unvalidated FKP run count. An attacker can use a specially crafted .doc file containing a large
crun value to read data beyond the 512-byte stack buffer, which can lead to the crash of applications such as AbiWord. This issue is present in the wvGetPAPX FKP() and wvGetCHPX FKP() functions.Recommendations
Update wvWare wv to a version newer than 1.2.9.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Abiword
Wvware Wv