| Release | Version |
|---|---|
| bookworm | 0.37-16 |
| bookworm (security) | 0.37-16+deb12u1 |
| trixie | 0.37-17 |
| forky | 0.37-18 |
| sid | 0.37-18 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| TEMP-1144645-69C016 | fixed | vulnerable (no DSA, postponed) | fixed | fixed | heap out-of-bounds write during Unicode font-name conversion |
| TEMP-1144643-BC29B7 | fixed | vulnerable (no DSA, postponed) | fixed | fixed | heap out-of-bounds write when appending font-table entry |
| CVE-2026-111678 | undetermined | undetermined | undetermined | undetermined | Antiword through 0.37 contains a stack out-of-bounds read vulnerabilit ... |
| CVE-2026-111677 | undetermined | undetermined | undetermined | undetermined | Antiword through 0.37 contains a heap out-of-bounds read vulnerability ... |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| TEMP-1145423-6B1E32 | vulnerable | vulnerable | vulnerable | vulnerable | heap out-of-bounds read during OLE property decoding |
| TEMP-1144642-D02975 | fixed | vulnerable | fixed | fixed | out-of-bounds read in szLpstr/xstrdup may expose adjacent heap data |
| TEMP-1144641-391451 | fixed | vulnerable | fixed | fixed | out-of-bounds read through attacker-controlled property offset |
| TEMP-1144640-5ABA9D | fixed | vulnerable | fixed | fixed | divide-by-zero on zero glyph width causes crash |
| Bug | Description |
|---|---|
| CVE-2014-8123 | Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 ... |
| CVE-2005-3126 | The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scri ... |
| DSA / DLA | Description |
|---|---|
| DLA-4870-1 | antiword - security update |
| DSA-945-1 | antiword - insecure temporary file |