CVE-2026-111678Published
Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c FKP Parsing
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111678 · Microsoft / collected KEV context
cve-program · CVE-2026-111678
- https://hackmd.io/@haindpwn/antiword-word8-plcflst-count-and-fkp-run-oob-read
- https://github.com/rsdoiel/antiword/blob/fe4b579067122a2d9d62647efb1ee7cfe3ca92bb/prop8.c#L997-L1022
- https://github.com/rsdoiel/antiword/blob/fe4b579067122a2d9d62647efb1ee7cfe3ca92bb/prop8.c#L1461-L1474
- https://www.vulncheck.com/advisories/antiword-through-0.37-stack-out-of-bounds-read-via-prop8-c-fkp-parsing
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.