The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Apr 28, 2015 |
| Debian | — | Upgrade libreoffice | Jul 30, 2024 | Apr 28, 2015 |
| Freebsd | — | Upgrade apache-openoffice-develUpgrade apache-openofficeUpgrade libreoffice | Dec 10, 2025 | May 7, 2015 |
| Gentoo Linux | — | Upgrade app-office/libreoffice-bin.Upgrade app-office/libreoffice.Upgrade app-office/libreoffice-bin-debug.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Apr 28, 2015 |
| Oracle_linux | — | Upgrade autocorr-hrUpgrade autocorr-caUpgrade libreoffice-langpack-plUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-asUpgrade libreoffice-wiki-publisherUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-urUpgrade libreoffice-langpack-arUpgrade libreoffice-ureUpgrade libreoffice-langpack-deUpgrade libreoffice-filtersUpgrade libreoffice-nlpsolverUpgrade autocorr-itUpgrade libreoffice-langpack-svUpgrade autocorr-srUpgrade libreoffice-langpack-nlUpgrade libreoffice-drawUpgrade autocorr-skUpgrade libreoffice-langpack-nbUpgrade autocorr-csUpgrade libreoffice-coreUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-daUpgrade autocorr-svUpgrade libreoffice-langpack-skUpgrade autocorr-lbUpgrade libreofficeUpgrade libreoffice-headlessUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-veUpgrade libreoffice-calcUpgrade libreoffice-ogltransUpgrade autocorr-deUpgrade libreoffice-graphicfilterUpgrade autocorr-esUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-nsoUpgrade autocorr-koUpgrade autocorr-slUpgrade libreoffice-bshUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-trUpgrade libreoffice-langpack-msUpgrade libreoffice-langpack-elUpgrade autocorr-bgUpgrade libreoffice-langpack-orUpgrade autocorr-roUpgrade libreoffice-langpack-pt-PTUpgrade autocorr-viUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-zuUpgrade libreoffice-impressUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-bgUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-zh-HansUpgrade autocorr-faUpgrade libreoffice-langpack-fiUpgrade autocorr-isUpgrade libreoffice-langpack-mrUpgrade autocorr-frUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-mlUpgrade autocorr-plUpgrade autocorr-fiUpgrade autocorr-gaUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-ukUpgrade libreoffice-gladeUpgrade libreoffice-rhinoUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-koUpgrade libreoffice-emailmergeUpgrade autocorr-enUpgrade libreoffice-xsltfilterUpgrade libreoffice-mathUpgrade autocorr-nlUpgrade autocorr-ptUpgrade autocorr-trUpgrade autocorr-afUpgrade libreoffice-sdkUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-tnUpgrade autocorr-zhUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-hiUpgrade autocorr-mnUpgrade autocorr-jaUpgrade libreoffice-baseUpgrade autocorr-huUpgrade autocorr-ltUpgrade libreoffice-langpack-thUpgrade autocorr-ruUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-frUpgrade autocorr-daUpgrade libreoffice-writerUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-esUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-dz | Oct 16, 2024 | Apr 28, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 27, 2015 |
| Suse | — | Upgrade libfreehand-develUpgrade libgraphite2-3-32bitUpgrade libvisio-0_1-1Upgrade libetonyek-devel-docUpgrade libcmis-c-0_5-5Upgrade libvisio-develUpgrade libvoikko1Upgrade libgltf-0_0-0Upgrade libbaseUpgrade myspell-noUpgrade libreoffice-pyunoUpgrade libfreehand-0_1-1Upgrade libcdr-devel-docUpgrade hyphen-develUpgrade myspell-af_ZAUpgrade libreoffice-l10n-xhUpgrade librevenge-stream-0_0-0Upgrade libe-book-devel-docUpgrade libcmis-0_5-5Upgrade libreoffice-baseUpgrade libreoffice-writer-extensionsUpgrade libreoffice-l10n-pt-BRUpgrade libcmis-develUpgrade libmwaw-devel-docUpgrade libcdr-develUpgrade libwps-develUpgrade myspell-it_ITUpgrade myspell-bs_BAUpgrade libreoffice-l10n-zh-HantUpgrade liblayoutUpgrade myspell-el_GRUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-zuUpgrade pentaho-reporting-flow-engineUpgrade myspell-zu_ZAUpgrade libreoffice-l10n-nbUpgrade libe-book-0_1-1Upgrade libreoffice-mailmergeUpgrade myspell-th_THUpgrade myspell-pt_PTUpgrade pentaho-libxmlUpgrade myspell-esUpgrade myspell-nl_NLUpgrade libcmis-c-develUpgrade apache-commons-loggingUpgrade myspell-roUpgrade myspell-ru_RUUpgrade liborcus-develUpgrade myspell-te_INUpgrade myspell-lo_LAUpgrade myspell-enUpgrade libhyphen0Upgrade libreoffice-drawUpgrade libreoffice-l10n-frUpgrade libetonyek-develUpgrade libreoffice-l10n-zh-HansUpgrade libreoffice-l10n-nnUpgrade myspell-bg_BGUpgrade libreoffice-calcUpgrade graphite2-develUpgrade liborcus-0_8-0Upgrade libreoffice-base-drivers-mysqlUpgrade myspell-dictionariesUpgrade libserializerUpgrade libreoffice-l10n-fiUpgrade liblangtag1Upgrade libvisio-devel-docUpgrade myspell-arUpgrade libreoffice-l10n-itUpgrade myspell-gu_INUpgrade libreoffice-l10n-plUpgrade myspell-cs_CZUpgrade librepositoryUpgrade libodfgen-0_1-1Upgrade myspell-sv_SEUpgrade myspell-be_BYUpgrade libreoffice-gnomeUpgrade sacUpgrade myspell-he_ILUpgrade libixion-develUpgrade myspell-caUpgrade libmwaw-develUpgrade libabw-devel-docUpgrade myspell-bn_BDUpgrade libreoffice-l10n-esUpgrade libvoikko-develUpgrade libmwaw-0_3-3Upgrade myspell-sl_SIUpgrade libreoffice-share-linkerUpgrade libreoffice-impressUpgrade myspell-hu_HUUpgrade libmspub-devel-docUpgrade libpagemaker-0_0-0Upgrade librevenge-develUpgrade myspell-sk_SKUpgrade fluteUpgrade libixion-0_10-0Upgrade libreoffice-voikkoUpgrade libodfgen-devel-docUpgrade libreoffice-l10n-huUpgrade libreofficeUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-pt-PTUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-skUpgrade libabw-0_1-1Upgrade libformulaUpgrade liblangtag-develUpgrade libreoffice-icon-theme-tangoUpgrade libe-book-develUpgrade libcdr-0_1-1Upgrade libreoffice-l10n-hiUpgrade libloaderUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-afUpgrade myspell-pt_BRUpgrade myspell-hi_INUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-ruUpgrade myspell-deUpgrade librevenge-0_0-0Upgrade libabw-develUpgrade libreoffice-mathUpgrade librevenge-generators-0_0-0Upgrade libreoffice-l10n-daUpgrade libodfgen-develUpgrade libreoffice-calc-extensionsUpgrade libetonyek-0_1-1Upgrade myspell-srUpgrade libreoffice-writerUpgrade myspell-pl_PLUpgrade myspell-viUpgrade myspell-hr_HRUpgrade libreoffice-l10n-csUpgrade libfreehand-devel-docUpgrade libreoffice-l10n-guUpgrade myspell-lv_LVUpgrade libfontsUpgrade libreoffice-l10n-jaUpgrade myspell-et_EEUpgrade libmspub-0_1-1Upgrade libmspub-develUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-koUpgrade myspell-lt_LTUpgrade malaga-suomiUpgrade myspell-fr_FRUpgrade libreoffice-l10n-caUpgrade libwps-0_4-4Upgrade libreoffice-l10n-deUpgrade myspell-da_DKUpgrade libgraphite2-3 | Dec 18, 2015 | Apr 28, 2015 |
| Ubuntu | — | Upgrade libreoffice-core | Nov 8, 2024 | Apr 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub