p PatchFirst

CVE-2026-118590

CVE-2026-118590 · UBUNTU-CVE-2026-118590

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

CVSS 6.9 · Medium

Published
Updated

Stack: system

Affected products and versions

  • nibabel Debian:12

    Versions
    • 5.0.0-2
    • 5.1.0-1
    • 5.2.0-1
    • 5.2.0-2
    • 5.2.0-3
    • 5.2.1-1
    • 5.2.1-2
    • 5.3.2-1
    • 5.3.2-2
    • 5.3.2-3
    • 5.3.2-4
    • 5.3.3-1
    • 5.4.0-1
    • 5.4.2-1
    • 5.4.2-3
    • 5.4.2-4
    • 5.4.2-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Debian:13

    Versions
    • 5.3.2-2
    • 5.3.2-3
    • 5.3.2-4
    • 5.3.3-1
    • 5.4.0-1
    • 5.4.2-1
    • 5.4.2-3
    • 5.4.2-4
    • 5.4.2-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Debian:14

    Versions
    • 5.3.2-2
    • 5.3.2-3
    • 5.3.2-4
    • 5.3.3-1
    • 5.4.0-1
    • 5.4.2-1
    • 5.4.2-3
    • 5.4.2-4
    • 5.4.2-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:16.04:LTS

    Versions
    • 2.0.1-1
    • 2.0.1-2ubuntu1
    • 2.0.1-3
    • 2.0.2-1
    • 2.0.2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:16.04:LTS

    Versions
    • 0.3.0+git262-gbb838d7-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:18.04:LTS

    Versions
    • 2.1.0-1
    • 2.2.0+git11-g2139ce0d-1
    • 2.2.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:18.04:LTS

    Versions
    • 0.4.1-2
    • 0.4.2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:20.04:LTS

    Versions
    • 2.5.0-1
    • 2.5.1-1
    • 2.5.1-2
    • 2.5.1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:20.04:LTS

    Versions
    • 0.4.2-2
    • 0.4.2-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:22.04:LTS

    Versions
    • 3.2.1-2
    • 3.2.1-3
    • 3.2.2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:22.04:LTS

    Versions
    • 0.4.3~rc1-1
    • 0.5.0-2
    • 0.5.0-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:24.04:LTS

    Versions
    • 5.1.0-1
    • 5.2.0-1
    • 5.2.0-2
    • 5.2.0-3
    • 5.2.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:24.04:LTS

    Versions
    • 0.5.0-8
    • 0.5.0-8build1
    • 0.6.0-1
    • 0.6.0-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:26.10

    Versions
    • 5.3.3-1
    • 5.4.2-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:26.10

    Versions
    • 0.6.1-4
    • 0.6.1-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nibabel Ubuntu:26.04:LTS

    Versions
    • 5.3.2-2
    • 5.3.2-3ubuntu1
    • 5.3.2-4
    • 5.3.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nipy Ubuntu:26.04:LTS

    Versions
    • 0.6.1-1build3
    • 0.6.1-3
    • 0.6.1-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →