SB2026092120 - Stack-based buffer overflow in Libextractor

Description

This security bulletin contains information about 1 vulnerability.

1) Stack-based buffer overflow (CVE-ID: CVE-2026-91752)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to a stack-based buffer overflow in the process_star_office function of the OLE2 plugin when processing attacker-controlled OLE2 stream data. A remote attacker can provide a crafted StarOffice document to execute arbitrary code.

This condition requires a multi-threaded context using EXTRACTOR_OPTION_IN_PROCESS.

Remediation

Install update from vendor's website.

References

• https://www.openwall.com/lists/oss-security/2026/09/16/16
• https://git.gnunet.org/gnunet/libextractor/commit/04004eb19033e093938138b09befdf31e71e8522.html