Vulnerability Description
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.
Related Weaknesses (CWE)
References
- https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuN
- https://www.hancom.com/support/downloadCenter/download
FAQ
What is CVE-2025-29867?
CVE-2025-29867 is a documented vulnerability. Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office...
How severe is CVE-2025-29867?
CVSS scoring is not yet available for CVE-2025-29867. Check NVD for updates.
Is there a patch for CVE-2025-29867?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.