CVE-2026-109831
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
Risk Assessment
Opening a malicious RTF file may crash the application or system, leading to service unavailability.
Recommendation
Update UnRTF to a patched version and avoid opening untrusted RTF files.
Other vulnerabilities in UnRTF
See all- CVE-2016-10091High
Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.
- CVE-2014-9275High
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.
- CVE-2014-9274High
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".
Original NVD description (English source)
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS