An uncontrolled memory access in the PDF export code of Apache OpenOffice versions up to 4.1.16 permits an attacker to craft a CFF font that triggers a stack overflow, leading to program crashes, memory corruption, and potentially the execution of arbitrary code. This vulnerability is identified as a stack-based buffer overflow (CWE‑121).

The affected product is Apache OpenOffice by the Apache Software Foundation. Versions 4.1.16 and earlier are vulnerable; users should refer to the specific release notes for 4.1.17 for the fix. No other vendors or product variants are listed.

The CVSS or EPSS scores are not provided, and the vulnerability is not listed in CISA’s KEV catalog. Nonetheless, the flaw requires an attacker to supply a malicious PDF containing a crafted CFF font to the victim’s OpenOffice instance. Successful exploitation could result in arbitrary code execution on the host, compromising confidentiality, integrity, and availability. Because the attack vector relies on user interaction with a crafted file, the risk is considered significant for organizations that routinely open PDFs in OpenOffice. No public exploits have been documented, but the potential impact warrants timely remediation.