Description
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.
Published: 2026-09-15
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 00:45:00 +0000

Type Values Removed Values Added
Description GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.
Title GNU libextractor before 1.15 Stack Overflow via OLE2
First Time appeared Gnu
Gnu libextractor
Weaknesses CWE-789
CPEs cpe:2.3:a:gnu:libextractor:*:*:*:*:*:*:*:*
Vendors & Products Gnu
Gnu libextractor
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Gnu Libextractor
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-15T00:35:43.518Z

Reserved: 2026-09-14T23:08:43.492Z

Link: CVE-2026-91752

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-15T01:16:54.967

Modified: 2026-09-15T01:16:54.967

Link: CVE-2026-91752

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-789

    Memory Allocation with Excessive Size Value