Most recent entries from all

EUVD-2026-264779

fkie_cve-2025-65411

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.

GHSA-cfg2-4jfq-43g5

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.

OESA-2026-3550 — unrtf security update

Affected: openEuler:22.03-LTS-SP4: unrtf

UnRTF is a command-line program written in C which converts documents in Rich Text Format (.rtf) to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: * Changes in the text&apos;s font, size, weight (bold), and slant (italic) * Underlines and strikethroughs * Partial support for text shadowing, outlining, embossing, or engraving * Capitalizations * Superscripts and subscripts * Expanded and condensed text * Changes in the foreground and background colors * Conversion of special characters to HTML entities Security Fix(es):

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.(CVE-2025-65411)

UBUNTU-CVE-2025-65411

Affected: Ubuntu:16.04:LTS: unrtf, Ubuntu:18.04:LTS: unrtf, Ubuntu:20.04:LTS: unrtf, Ubuntu:22.04:LTS: unrtf, Ubuntu:24.04:LTS: unrtf, Ubuntu:25.10: unrtf, Ubuntu:26.04:LTS: unrtf

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.