CVE-2026-103678

A heap out-of-bounds read vulnerability exists in tnef due to insufficient input buffer boundary validation within the get_rtf_data_from_buf() function. An attacker can trigger this flaw by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. The impact includes...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

CVE-2026-103678: Out-of-bounds Read

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...