CVE-2016-1513: Apache Openoffice

High severity, CVSS 7.8. EPSS: 4.3% chance of exploitation in the next 30 days.

The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) or execute arbitrary code via crafted MetaActions in an (1) ODP or (2) OTP file.

Affected products

• Apache Openoffice: up to and including 4.1.2

Published 2016-08-05. Last modified 2026-06-17.