CVE-2026-103678

A heap out-of-bounds read vulnerability exists in tnef due to insufficient input buffer boundary validation within the get_rtf_data_from_buf() function. An attacker can trigger this flaw by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. The impact includes...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

CVE-2026-103678: Out-of-bounds Read

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

PT-2026-103837

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in get rtf data from buf, reading beyond the...

vet

vet: File Triage & Artifact Extraction !CIhttps://github...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation CVE-2025-21298 delivered via a malicious RTF attachment. Investigation of the alert from LetsDefend On 4 February...

Graphics component Windows Code Execution

The vulnerability of the Graphics component in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created RTF format file...

SUSE CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

EUVD-2026-43745

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

CVE-2026-62641: Allocation of Resources Without Limits or Throttling

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

autonomous-agent (0.0.1), py-rtf-framework (>=1.2.0, <=2.0.1) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.33)

langchain-core PYPI version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - autonomous-agent 0.0.1 - py-rtf-framework =1.2.0, =0.1.1, =0.3.1 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RC...

Exploit for Use After Free in Microsoft

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...

autonomous-agent (0.0.1), py-rtf-framework (>=1.2.0, <=2.0.1) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.2.33)

langchain-core PYPI version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - autonomous-agent 0.0.1 - py-rtf-framework =1.2.0, =0.1.1, =0.3.1 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF...

EUVD-2026-15459

textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to childprocess.exec in lib/extractors/doc.js, rtf.js, dxf.js, images.js, and lib/util.js with inadequat...