CVE-2026-91752
published 2026-09-15CVE-2026-91752: GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array…
PriorityP347high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.74%
54.1th percentile
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | libextractor | < 1.15 | 1.15 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv4.08.7HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
GNU libextractor up to 1.14 process_star_office buffer overflow
vuldb·2026-09-15·CVSS 7.5
CVE-2026-91752 [HIGH] GNU libextractor up to 1.14 process_star_office buffer overflow
A vulnerability classified as problematic was found in GNU libextractor up to 1.14. Affected is the function process_star_office. The manipulation results in buffer overflow.
This vulnerability is known as CVE-2026-91752. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
GHSA
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data
ghsa_unreviewed·2026-09-15
CVE-2026-91752 [HIGH] CWE-789 GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.
No detection rules found.
No public exploits indexed.
https://git.gnunet.org/gnunet/libextractor/commit/04004eb19033e093938138b09befdf31e71e8522.htmlhttps://git.gnunet.org/gnunet/libextractor/commit/2781c7e9095f4ddaff4f535d69342f3903b18422.htmlhttps://github.com/Haitam-lazaar/libextractor-ole2-rcehttps://www.gnu.org/software/libextractor/https://www.vulncheck.com/advisories/gnu-libextractor-before-1.15-stack-overflow-via-ole2http://www.openwall.com/lists/oss-security/2026/09/16/16
2026-09-15
Published