Live › vulnerability › CVE-2026-118590
Go to dashboardnibabel, a Python library for reading neuroimaging file formats, has an uncontrolled memory allocation in array_from_file in nibabel/volumeutils.py when parsing a crafted file header. An attacker who can supply such a file can exhaust memory and crash the process that reads it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 01:36 UTC. All times on this page are UTC.
Applications that open image files supplied by users or other untrusted sources with nibabel up to 5.4.2. Pipelines that only read files the team itself produced can skip it. The sources do not give a patched release; a fix pull request was still awaiting acceptance.
No product ranges from the sources yet.
pip show nibabel to see the installed versionUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.
This page as .md · .json · in your agent: get_signal("CVE-2026-118590")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.