CVE-2026-112056
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c. Attackers can supply a crafted .doc file with ten or fewer styles or out-of-range style base indexes, crashing applications such as AbiWord.
Risk Assessment
Opening a malicious Word document in an application using wvWare can cause a crash and loss of unsaved work. Memory disclosure from the process is also possible.
Recommendation
Update wvWare wv to a version newer than 1.2.9 once available. Until then, avoid opening untrusted .doc files in applications such as AbiWord.
Other vulnerabilities in wvWare wv
Original NVD description (English source)
wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past heap arrays, crashing applications such as AbiWord.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS