An out‑of‑bounds write occurs in the heap allocation used by the WW8 PLCF reader when parsing a Microsoft Word document. The vulnerability can cause the application to crash or corrupt other memory areas, potentially leading to denial of service or, in some scenarios, further exploitation if an attacker can gain code execution through the corrupted memory. The weakness is identified as CWE‑787.

Apache OpenOffice versions 4.1.16 and earlier, distributed by the Apache Software Foundation. No other vendors or products are listed as affected in the CNA data.

The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, so the exploitation probability is not quantified. CVSS metrics are not provided, making the precise severity difficult to assess. The likely attack vector involves an attacker crafting a malicious Word document and convincing a user to open it, which relies on local execution; thus, the risk is significant for environments where users routinely open Word files from untrusted sources and no mitigation is in place.