Heap-based Out-of-Bounds Read in wvWare

Executive Summary

CVE-2026-112056 is a heap-based out-of-bounds read vulnerability in wvWare wv through version 1.2.9. It occurs in the wvGetSTSH function in stylesheet.c when processing crafted Word stylesheets. Attackers can crash applications by supplying .doc files with ten or fewer styles or out-of-range style base indexes, causing the program to read past allocated heap memory.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect systems running wvWare wv versions up to 1.2.9. Check for crashes when processing Word documents, especially those with crafted stylesheets. Use tools like 'strings' or 'hexdump' to analyze .doc files for unusual style definitions or base indexes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to crash applications like AbiWord by providing malformed Word documents. Successful exploitation could lead to denial-of-service conditions or potentially arbitrary code execution in the context of the vulnerable application.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily causes application crashes due to heap-based out-of-bounds reads, which does not directly lead to data breaches or unauthorized access. However, if exploited to read memory contents, it could potentially expose sensitive data processed by the application, such as documents containing personal or health information. This could impact compliance with GDPR (if personal data is exposed) or HIPAA (if protected health information is involved).

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update wvWare wv to a patched version beyond 1.2.9. If updating is not possible, restrict processing of untrusted Word documents or disable applications using the vulnerable library. Monitor for crashes in applications like AbiWord.

Useful 0 Not Useful 0