CVE-2025-64406: An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other…

PriorityP423medium4.3CVSS 3.1

AVNACLPRNUIRSUCNINAL

EPSS

0.50%

39.4th percentile

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	openoffice	< 4.1.16	4.1.16
apache_software_foundation	apache_openoffice	<= 4.1.15	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.