JVN#29783594
UnRTF vulnerable to out-of-bounds write

Overview

UnRTF by GNU Project contains an out-of-bounds write vulnerability.

Products Affected

• UnRTF versions prior to 0.21.12

Description

UnRTF by GNU Project contains the following vulnerability:

• Out-of-bounds Write (CWE-787)
  • CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N Base Score 5.1
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Base Score 5.4
  • CVE-2026-109831

Impact

If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.