Read the docs
TI-2025-21258 Aliases CVE-2025-29867GHSA-rf85-m599-59pj

Type confusion in Hancom Office 2018

Priority LOW 38CWE-843Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-843 and the CVSS impact.

Summary

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00269 19th percentileScored 2026-11-07
Fix Fixed Hancom Office 2018 (Hancom Inc.): 10.0.0.12681Hancom Office 2020 (Hancom Inc.): 11.0.0.8916+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HancomHancom Office 2018before 10.0.0.1268110.0.0.12681Patch availableCNA
HancomHancom Office 2020before 11.0.0.891611.0.0.8916Patch availableCNA
HancomHancom Office 2022before 12.0.0.442612.0.0.4426Patch availableCNA
HancomHancom Office 2024before 13.0.0.305013.0.0.3050Patch availableCNA
  • Hancom Office 2018 VendorHancom Affected before 10.0.0.12681 Fixed in 10.0.0.12681 Patch available CNA
  • Hancom Office 2020 VendorHancom Affected before 11.0.0.8916 Fixed in 11.0.0.8916 Patch available CNA
  • Hancom Office 2022 VendorHancom Affected before 12.0.0.4426 Fixed in 12.0.0.4426 Patch available CNA
  • Hancom Office 2024 VendorHancom Affected before 13.0.0.3050 Fixed in 13.0.0.3050 Patch available CNA

Remediation

  • Fix · CNA Hancom Office 2018 (Hancom Inc.) Fixed in 10.0.0.12681
  • Fix · CNA Hancom Office 2020 (Hancom Inc.) Fixed in 11.0.0.8916
  • Fix · CNA Hancom Office 2022 (Hancom Inc.) Fixed in 12.0.0.4426
  • Fix · CNA Hancom Office 2024 (Hancom Inc.) Fixed in 13.0.0.3050

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-29867
  2. 2026-10-03 Alias added: GHSA-rf85-m599-59pj

References

Other 2

  • TI-2023-15823 Use after free in Hancom Office 2020 CVSS 3.1HIGH 8.8
  • TI-2022-14904 A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version… CVSS 3.1HIGH 7.8
  • TI-2021-05003 Heap-based buffer overflow in Hancom CVSS 3.1HIGH 7.8
  • TI-2012-01109 Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to… CVSS 2.0HIGH 9.3
  • TI-2018-03754 Memory corruption in Hancom office Hword NEO CVSS 3.0CRITICAL 9.8
  • TI-2013-06075 Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via… CVSS 2.0HIGH 7.5
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences