CVE-2026-111677
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap allocation that crash the process.
Risk Assessment
The vulnerability allows remote denial of service by supplying a crafted .doc file. The organization may suffer losses due to unavailability of document processing services.
Recommendation
Update Antiword to a version later than 0.37 or apply the vendor patch. It is also recommended to avoid processing untrusted .doc files until the update is applied.
Other vulnerabilities in Antiword
Original NVD description (English source)
Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap allocation that crash the process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS