Stack Overflow Vulnerability in GNU Unrtf
CVE-2025-65410
6.2MEDIUM
What is CVE-2025-65410?
The GNU Unrtf application, specifically in the src/main.c component, has a vulnerability that can lead to a Denial of Service (DoS). This occurs when an attacker manipulates the filename parameter by injecting specially crafted input, which can exploit the stack overflow. This security issue affects version 0.21.10 and highlights the importance of input validation in preventing such vulnerabilities.
References
CVSS V3.1
Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved