CVE-2025-64406

MEDIUM

Apache Openoffice < 4.1.16 - Out-of-Bounds Write

Title source: rule

Description

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

Scores

CVSS v3 4.3
EPSS 0.0011
EPSS Percentile 29.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Classification

CWE
CWE-787
Status published

Affected Products (1)

apache/openoffice < 4.1.16

Timeline

Published Nov 12, 2025
Tracked Since Feb 18, 2026