Stack Overflow Vulnerability in GNU Unrtf
CVE-2025-65410

6.2MEDIUM

Key Information:

Vendor

GNU
Status
GNU Unrtf
Vendor
CVE Published:
23 December 2025

What is CVE-2025-65410?

The GNU Unrtf application, specifically in the src/main.c component, has a vulnerability that can lead to a Denial of Service (DoS). This occurs when an attacker manipulates the filename parameter by injecting specially crafted input, which can exploit the stack overflow. This security issue affects version 0.21.10 and highlights the importance of input validation in preventing such vulnerabilities.

References

https://www.gnu.org/software/unrtf/
https://lists.gnu.org/archive/html/bug-unrtf/2025-11/msg0...
https://savannah.gnu.org/projects/unrtf/

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.