The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Apr 28, 2015 |
| Debian | — | Upgrade libreoffice | Jul 30, 2024 | Apr 28, 2015 |
| Freebsd | — | Upgrade apache-openoffice-develUpgrade apache-openofficeUpgrade libreoffice | Dec 10, 2025 | May 7, 2015 |
| Gentoo Linux | — | Upgrade app-office/libreoffice-bin.Upgrade app-office/libreoffice.Upgrade app-office/libreoffice-bin-debug.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Apr 28, 2015 |
| Oracle_linux | — | Upgrade autocorr-hrUpgrade autocorr-caUpgrade libreoffice-langpack-plUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-asUpgrade libreoffice-wiki-publisherUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-urUpgrade libreoffice-langpack-arUpgrade libreoffice-ureUpgrade libreoffice-langpack-deUpgrade libreoffice-filtersUpgrade libreoffice-nlpsolverUpgrade autocorr-itUpgrade libreoffice-langpack-svUpgrade autocorr-srUpgrade libreoffice-langpack-nlUpgrade libreoffice-drawUpgrade autocorr-skUpgrade libreoffice-langpack-nbUpgrade autocorr-csUpgrade libreoffice-coreUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-daUpgrade autocorr-svUpgrade libreoffice-langpack-skUpgrade autocorr-lbUpgrade libreofficeUpgrade libreoffice-headlessUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-veUpgrade libreoffice-calcUpgrade libreoffice-ogltransUpgrade autocorr-deUpgrade libreoffice-graphicfilterUpgrade autocorr-esUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-nsoUpgrade autocorr-koUpgrade autocorr-slUpgrade libreoffice-bshUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-trUpgrade libreoffice-langpack-msUpgrade libreoffice-langpack-elUpgrade autocorr-bgUpgrade libreoffice-langpack-orUpgrade autocorr-roUpgrade libreoffice-langpack-pt-PTUpgrade autocorr-viUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-zuUpgrade libreoffice-impressUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-bgUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-zh-HansUpgrade autocorr-faUpgrade libreoffice-langpack-fiUpgrade autocorr-isUpgrade libreoffice-langpack-mrUpgrade autocorr-frUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-mlUpgrade autocorr-plUpgrade autocorr-fiUpgrade autocorr-gaUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-ukUpgrade libreoffice-gladeUpgrade libreoffice-rhinoUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-koUpgrade libreoffice-emailmergeUpgrade autocorr-enUpgrade libreoffice-xsltfilterUpgrade libreoffice-mathUpgrade autocorr-nlUpgrade autocorr-ptUpgrade autocorr-trUpgrade autocorr-afUpgrade libreoffice-sdkUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-tnUpgrade autocorr-zhUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-hiUpgrade autocorr-mnUpgrade autocorr-jaUpgrade libreoffice-baseUpgrade autocorr-huUpgrade autocorr-ltUpgrade libreoffice-langpack-thUpgrade autocorr-ruUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-frUpgrade autocorr-daUpgrade libreoffice-writerUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-esUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-dz | Oct 16, 2024 | Apr 28, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 27, 2015 |
| Suse | — | Upgrade libfreehand-develUpgrade libgraphite2-3-32bitUpgrade libvisio-0_1-1Upgrade libetonyek-devel-docUpgrade libcmis-c-0_5-5Upgrade libvisio-develUpgrade libvoikko1Upgrade libgltf-0_0-0Upgrade libbaseUpgrade myspell-noUpgrade libreoffice-pyunoUpgrade libfreehand-0_1-1Upgrade libcdr-devel-docUpgrade hyphen-develUpgrade myspell-af_ZAUpgrade libreoffice-l10n-xhUpgrade librevenge-stream-0_0-0Upgrade libe-book-devel-docUpgrade libcmis-0_5-5Upgrade libreoffice-baseUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-pt-BRUpgrade libcmis-develUpgrade libmwaw-devel-docUpgrade libcdr-develUpgrade libwps-develUpgrade myspell-it_ITUpgrade myspell-bs_BAUpgrade libreoffice-l10n-zh-HantUpgrade liblayoutUpgrade myspell-el_GRUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-zuUpgrade pentaho-reporting-flow-engineUpgrade myspell-zu_ZAUpgrade libreoffice-l10n-nbUpgrade libe-book-0_1-1Upgrade libreoffice-mailmergeUpgrade myspell-th_THUpgrade myspell-pt_PTUpgrade pentaho-libxmlUpgrade myspell-esUpgrade myspell-nl_NLUpgrade libcmis-c-develUpgrade apache-commons-loggingUpgrade myspell-roUpgrade myspell-ru_RUUpgrade liborcus-develUpgrade myspell-te_INUpgrade myspell-lo_LAUpgrade myspell-enUpgrade libhyphen0Upgrade libreoffice-drawUpgrade libreoffice-l10n-frUpgrade libetonyek-develUpgrade libreoffice-l10n-zh-HansUpgrade libreoffice-l10n-nnUpgrade myspell-bg_BGUpgrade libreoffice-calcUpgrade graphite2-develUpgrade liborcus-0_8-0Upgrade libreoffice-base-drivers-mysqlUpgrade myspell-dictionariesUpgrade libserializerUpgrade libreoffice-l10n-fiUpgrade liblangtag1Upgrade libvisio-devel-docUpgrade myspell-arUpgrade libreoffice-l10n-itUpgrade myspell-gu_INUpgrade libreoffice-l10n-plUpgrade myspell-cs_CZUpgrade librepositoryUpgrade libodfgen-0_1-1Upgrade myspell-sv_SEUpgrade myspell-be_BYUpgrade libreoffice-gnomeUpgrade sacUpgrade myspell-he_ILUpgrade libixion-develUpgrade myspell-caUpgrade libmwaw-develUpgrade libabw-devel-docUpgrade myspell-bn_BDUpgrade libreoffice-l10n-esUpgrade libvoikko-develUpgrade libmwaw-0_3-3Upgrade myspell-sl_SIUpgrade libreoffice-share-linkerUpgrade libreoffice-impressUpgrade myspell-hu_HUUpgrade libmspub-devel-docUpgrade libpagemaker-0_0-0Upgrade librevenge-develUpgrade myspell-sk_SKUpgrade fluteUpgrade libixion-0_10-0Upgrade libreoffice-voikkoUpgrade libodfgen-devel-docUpgrade libreoffice-l10n-huUpgrade libreofficeUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-pt-PTUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-skUpgrade libabw-0_1-1Upgrade libformulaUpgrade liblangtag-develUpgrade libreoffice-icon-theme-tangoUpgrade libe-book-develUpgrade libcdr-0_1-1Upgrade libreoffice-l10n-hiUpgrade libloaderUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-afUpgrade myspell-pt_BRUpgrade myspell-hi_INUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-ruUpgrade myspell-deUpgrade librevenge-0_0-0Upgrade libabw-develUpgrade libreoffice-mathUpgrade librevenge-generators-0_0-0Upgrade libreoffice-l10n-daUpgrade libodfgen-develUpgrade libreoffice-calc-extensionsUpgrade libetonyek-0_1-1Upgrade myspell-srUpgrade libreoffice-writerUpgrade myspell-pl_PLUpgrade myspell-viUpgrade myspell-hr_HRUpgrade libreoffice-l10n-csUpgrade libfreehand-devel-docUpgrade libreoffice-l10n-guUpgrade myspell-lv_LVUpgrade libfontsUpgrade libreoffice-l10n-jaUpgrade myspell-et_EEUpgrade libmspub-0_1-1Upgrade libmspub-develUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-koUpgrade myspell-lt_LTUpgrade malaga-suomiUpgrade myspell-fr_FRUpgrade libreoffice-l10n-caUpgrade libwps-0_4-4Upgrade libreoffice-l10n-deUpgrade myspell-da_DKUpgrade libgraphite2-3 | Dec 18, 2015 | Apr 28, 2015 |
| Ubuntu | — | Upgrade libreoffice-core | Nov 8, 2024 | Apr 28, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub