CVE-2014-9274

UnRTF (a command-line RTF converter) is affected by CVE-2014-9274 and CVE-2014-9275. The issues include out-of-bounds memory accesses and other crashes that could lead to denial of service or, potentially, arbitrary code execution when processing crafted RTF files (e.g., malformed color tables). ...

CVE-2014-9275

UnRTF contains CVEs CVE-2014-9274 and CVE-2014-9275. The issues allow remote attackers to cause denial of service (crash/out-of-bounds access) and potentially execute arbitrary code via crafted RTF files. Affected software is UnRTF (RTF converter); root causes involve memory access/crashes descri...

CVE-2025-65410

A stack overflow vulnerability exists in the src/main.c component of GNU Unrtf v0.21.10 . Attackers can exploit this by injecting crafted input into the filename parameter , resulting in a Denial of Service (DoS) . No specific remediation details or exploit links are provided in the documents.

CVE-2016-10091

The vulnerability CVE-2016-10091 affects unrtf 0.21.9, where multiple stack-based buffer overflows can be triggered by a negative integer write in the functions cmd_expand, cmd_emboss, and cmd_engrave. This enables a remote attacker to cause a denial of service. The provided connected documents c...

CVE-2025-65411

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows an attacker to trigger a Denial of Service (DoS) . The vulnerability is exploited by injecting a crafted payload into the search_path parameter, which can result in the application crashing or becoming unresponsiv...