Live › vulnerability › CVE-2026-109831
Go to dashboardUnRTF, the GNU RTF-to-text converter, has an out-of-bounds write triggered when it parses an attacker-crafted RTF file. The sources say a user opening such a file may hit a denial-of-service condition.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that run UnRTF on RTF files from outside sources, such as mail gateways, document previewers or upload handlers. Teams that never convert untrusted RTF can skip it. The sources do not name affected versions or a patched release.
No product ranges from the sources yet.
unrtf --version to see the installed version; the sources do not name the affected range.Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
This page as .md · .json · in your agent: get_signal("CVE-2026-109831")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.