CVE Catalog

CVE-2025-29867

High
Published: Translated: NVD NIST

Summary

A Type Confusion vulnerability in Hancom Office allows file content injection. Affects Hancom Office 2018, 2020, 2022, and 2024 before specific patches.

Risk Assessment

An attacker could exploit this to inject or modify file content, potentially leading to data integrity compromise or further attacks.

Recommendation

Update Hancom Office to the latest versions: 2018 (10.0.0.12681), 2020 (11.0.0.8916), 2022 (12.0.0.4426), and 2024 (13.0.0.3050).

Other vulnerabilities in Hancom Office

See all
Original NVD description (English source)

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS