CVE-2026-109831
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
| Vendor | gnu project |
| Product | unrtf |
| Published | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for gnu project unrtf
Be the first to know when new medium vulnerabilities affecting gnu project unrtf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Affected Versions
GNU Project / UnRTF
0 < 0.21.12