CVE-2025-65410

Low

Published: —Translated: 22/10/2026(UTC)NVD NIST

Summary

A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename parameter.

Risk Assessment

An attacker can crash the RTF conversion process, causing service unavailability. The risk affects systems processing untrusted files or input arguments.

Recommendation

Restrict processing of untrusted input by unrtf and consider updating to a patched version. Monitor availability of services using this tool.

Other vulnerabilities in GNU Unrtf

CVE-2025-65411Low
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.

Original NVD description (English source)

A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS