p PatchFirst

CVE-2026-115722

CVE-2026-115722 · RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header

This page contains facts from public vulnerability sources. Check the original advisory before updating.

RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.

CVSS 6.9 · Medium · EPSS 0.1%

Published
Updated

Stack: system

Affected products and versions

  • rply

    Versions
    • ≥ 0, ≤ 1.1.4: Affected (semver)

    No fix published

  • python-rply Debian:12

    Versions
    • 0.7.7-3
    • 0.7.8-1
    • 0.7.8-2
    • 0.7.8-3
    • 0.7.8-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python-rply Debian:13

    Versions
    • 0.7.8-3
    • 0.7.8-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python-rply Debian:14

    Versions
    • 0.7.8-3
    • 0.7.8-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rply Ubuntu:26.10

    Versions
    • 1.1.4-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rply Ubuntu:26.04:LTS

    Versions
    • 1.1.4-1
    • 1.1.4-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →