CVE-2026-111678

The Antiword utility (versions through 0.37) is vulnerable to a stack out-of-bounds read in the vGet8PapInfo and vGet8ChrInfo functions within prop8.c. This issue is caused by unbounded FKP run counts and grpprl offsets . An attacker can exploit this by providing a crafted .doc file containing ma...

CVE-2026-111678 Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c FKP Parsing

Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiwor...

CVE-2026-111678 Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c FKP Parsing

Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiwor...