CVE-2016-4298

CVE-2016-4298 is an integer overflow vulnerability affecting Hancom Office 2014 when processing .hpt files. An attacker can craft a malicious document that, when opened, causes an undersized buffer allocation, leading to a heap overflow and potential arbitrary code execution. This high-severity vulnerability (CVSS 7.8) requires user interaction (opening the malicious file) and local access, but can result in full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.