PT-2026-136940

CVE-2026-90632

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Apache OpenOffice documents can include multimedia content (audio, video, etc.)
A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-552: Files or Directories Accessible to External Parties
Related identifiers
CVE-2026-90632
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com