CVE-2026-111678
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiword or corrupting style parsing.
Risk Assessment
Remote application crash (DoS) or potential memory data leakage is possible when processing a malicious .doc file. This affects systems that process untrusted Word documents.
Recommendation
Upgrade antiword to a version containing the fix or consider using an alternative tool. Do not process untrusted .doc files until the update is applied.
Other vulnerabilities in Antiword
Original NVD description (English source)
Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiword or corrupting style parsing.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS