Stack Buffer Overflow in GNU libextractor <1.15 (process_star_office)
CVE-2026-91752 Published on September 15, 2026
GNU libextractor before 1.15 Stack Overflow via OLE2
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.
Vulnerability Analysis
CVE-2026-91752 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. An automatable proof of concept (POC) exploit exists. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
What is a Stack Exhaustion Vulnerability?
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
CVE-2026-91752 has been classified to as a Stack Exhaustion vulnerability or weakness.
Products Associated with CVE-2026-91752
Want to know whenever a new CVE is published for GNU Libextractor? stack.watch will email you.
Affected Versions
GNU libextractor:- Before 1.15 is affected.