Stack-Based Buffer Overflow in libextractor: CVE-2026-91752
Summary
DEBIAN-CVE-2026-91752: GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Affects libextractor versions 1:1.11-7 – 1:1.19-2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libextractor is a library used for extracting metadata from various file formats, including multimedia and document files. It is widely utilized in applications that require metadata extraction capabilities. The library's functionality is crucial for applications that need to process and analyze file contents efficiently. However, a recent vulnerability has been identified that exposes libextractor to potential exploitation through specially crafted StarOffice documents.
Vulnerability Detail
GNU libextractor before version 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function. This vulnerability arises from the handling of variable-length stack arrays that are sized based on attacker-controlled OLE2 stream data. An attacker can craft malicious StarOffice documents that allocate up to 4 MB on the stack, leading to a stack overflow. This can cause applications that extract metadata from these documents to crash, potentially leading to denial of service or further exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid opening untrusted StarOffice documents until the package is updated. Additionally, consider using alternative metadata extraction tools that do not rely on libextractor until the vulnerability is resolved.
Conclusion
The vulnerability CVE-2026-91752 in libextractor poses a significant risk due to the potential for stack-based buffer overflow through malicious documents. It is crucial to update to the patched version to mitigate this risk. Users should remain vigilant and consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for libextractor →
FAQ
CVE-2026-91752 is a vulnerability in the libextractor library that allows for a stack-based buffer overflow through malicious StarOffice documents.
The vulnerability can lead to application crashes and may allow attackers to exploit the system further, resulting in denial of service.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Yes, a patched version of libextractor (1:1.17-1 or later) is available. Updating to this version will resolve the vulnerability.
If you cannot update immediately, avoid opening untrusted StarOffice documents and consider using alternative tools for metadata extraction.
References
Related vulnerabilities
Recent vulnerabilities recorded for libextractor.
