CVE-2026-109831
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
Published Updated
PatchFirst · Latest vulnerabilities
unrtf vulnerabilities
Vulnerability published for unrtf in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 3
CVE-2025-65411
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.
Published UpdatedCVE-2025-65410
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename parameter.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.