CVE-2014-9274

UnRTF (a command-line RTF converter) is affected by CVE-2014-9274 and CVE-2014-9275. The issues include out-of-bounds memory accesses and other crashes that could lead to denial of service or, potentially, arbitrary code execution when processing crafted RTF files (e.g., malformed color tables). ...

CVE-2014-9275

UnRTF contains CVEs CVE-2014-9274 and CVE-2014-9275. The issues allow remote attackers to cause denial of service (crash/out-of-bounds access) and potentially execute arbitrary code via crafted RTF files. Affected software is UnRTF (RTF converter); root causes involve memory access/crashes descri...

CVE-2016-10091

The vulnerability CVE-2016-10091 affects unrtf 0.21.9, where multiple stack-based buffer overflows can be triggered by a negative integer write in the functions cmd_expand, cmd_emboss, and cmd_engrave. This enables a remote attacker to cause a denial of service. The provided connected documents c...

CVE-2025-65410

GNU UnRTF, version 0.21.10, contains a stack overflow in src/main.c that can cause a Denial of Service when a crafted input is provided in the filename parameter. The CVE-2025-65410 issue is documented across multiple sources (NVD/ENISA OSV series) with a local attack vector targeting the filenam...

CVE-2025-65411

CVE-2025-65411 affects GNU Unrtf v0.21.10. A NULL pointer dereference in the src/path.c component can cause a Denial of Service when a crafted payload is injected into the search_path parameter. The Connected documents confirm the vulnerability but do not provide concrete exploit details beyond t...