CVE-2026-103678Medium· 5.4▾ SunlitA flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the application fails to properly validate input buffer boundaries be…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the application fails to properly validate input buffer boundaries before copying data in get_rtf_data_from_buf(), reading beyond the allocated memory occurs. This flaw can cause the application to crash, leading to a Denial of Service (DoS), or leak sensitive memory contents into extracted output files.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-103680Low· 3.1A flaw was found in tnef
CVE-2026-103679Medium· 6.5A flaw was found in tnef
CVE-2025-11494Low· 3.3A vulnerability was found in GNU Binutils 2.45
CVE-2025-48622Medium· 5.5In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow
CVE-2025-48596High· 7.8In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check
CVE-2025-11211High· 7.5Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page