Wv
Monthly
A crafted Microsoft Word .doc file can crash applications built on wvWare wv through 1.2.9 by triggering a heap-based out-of-bounds read in the wvGetSTSH stylesheet parser. The issue is local and requires the victim to open the malicious document; the assessed impact is availability-only, with no code execution or data disclosure established. No public exploit code or CISA KEV active exploitation was identified at time of analysis.
Stack-based out-of-bounds read in wvWare wv through 1.2.9 allows an unauthenticated local attacker to cause a client-side denial of service: a victim must open a crafted .doc file whose FKP structure carries an oversized crun value, triggering wvGetPAPX_FKP or wvGetCHPX_FKP to read past a 512-byte stack buffer and crash AbiWord or another libwv-based reader. The assessed impact is availability only (CVSS 4.0 local, UI:P, A:H; CVSS 3.1 local, UI:R, A:H), with no confidentiality or integrity impact established. No public exploit code or CISA KEV active exploitation was identified at time of analysis.
A crafted Microsoft Word .doc file can crash applications built on wvWare wv through 1.2.9 by triggering a heap-based out-of-bounds read in the wvGetSTSH stylesheet parser. The issue is local and requires the victim to open the malicious document; the assessed impact is availability-only, with no code execution or data disclosure established. No public exploit code or CISA KEV active exploitation was identified at time of analysis.
Stack-based out-of-bounds read in wvWare wv through 1.2.9 allows an unauthenticated local attacker to cause a client-side denial of service: a victim must open a crafted .doc file whose FKP structure carries an oversized crun value, triggering wvGetPAPX_FKP or wvGetCHPX_FKP to read past a 512-byte stack buffer and crash AbiWord or another libwv-based reader. The assessed impact is availability only (CVSS 4.0 local, UI:P, A:H; CVSS 3.1 local, UI:R, A:H), with no confidentiality or integrity impact established. No public exploit code or CISA KEV active exploitation was identified at time of analysis.