CVE-2021-33035

CVE-2021-33035 is a buffer overflow vulnerability in Apache OpenOffice versions up to and including 4.1.10, allowing arbitrary code execution when processing specially crafted dBase/DBF documents. The vulnerability arises from unchecked field sizes during DBF data reading, leading to an overflow of allocated memory. With a CVSS score of 7.8 (High), successful exploitation requires user interaction (opening a malicious document) and can result in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, though it has garnered some community discussion and media coverage.