CVE-2026-111678: Out-of-bounds Read in Adri van Os antiword
Description
Antiword version 0.37 and earlier contains a stack out-of-bounds read vulnerability in the functions vGet8PapInfo and vGet8ChrInfo within prop8.c. This occurs because FKP run counts and grpprl offsets are not properly bounded, allowing crafted .doc files with malicious FKP pages to cause reads beyond a 512-byte stack buffer. This can lead to application crashes or corrupted style parsing.
CVSS v4.0
Score 4.8medium
Affected software
Adri van Os
antiword
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-111678 is a stack out-of-bounds read vulnerability in Antiword through version 0.37. The flaw exists in the vGet8PapInfo and vGet8ChrInfo functions in prop8.c due to unbounded FKP run counts and grpprl offsets. An attacker can exploit this by supplying a specially crafted .doc file containing malicious FKP pages, causing the program to read beyond the allocated 512-byte stack buffer. This results in a crash or corrupted style parsing within Antiword.
Potential Impact
The vulnerability allows an attacker to cause a denial of service by crashing Antiword or corrupting style parsing when processing malicious .doc files. There is no indication of code execution or data disclosure beyond the out-of-bounds read. The CVSS score of 4.8 reflects a medium severity with local attack vector and low privileges required.
Mitigation Recommendations
No patch or official fix is currently documented. Users should avoid opening untrusted .doc files with affected versions of Antiword (<=0.37) until a fix is available. Monitor vendor advisories for updates regarding remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-16T14:31:18.687Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad264152cdf04f65619959e
Added to database: 10/16/2026, 17:51:17 UTC
Last enriched: 10/16/2026, 18:19:16 UTC
Last updated: 10/16/2026, 23:10:55 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.