Live › vulnerability › CVE-2026-115722
Go to dashboardRPly, a C library for reading PLY 3D model files, does not validate an array index when parsing list properties in a file header. A crafted PLY file can crash ASCII parsing or corrupt memory during binary parsing.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that link RPly and parse PLY files supplied by users or other untrusted sources are exposed; programs that only read locally generated, trusted PLY files are less exposed. The sources do not name a fixed version or specific affected products.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.
This page as .md · .json · in your agent: get_signal("CVE-2026-115722")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.