A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename parameter.
References
| Link | Resource |
|---|---|
| https://github.com/MAXEUR5/Vulnerability_Disclosures/blob/main/2025/CVE-2025-65410.md | Exploit Third Party Advisory |
| https://hg.savannah.gnu.org/hgweb/unrtf/rev/a5d3b025a8b1 | Broken Link |
| https://lists.gnu.org/archive/html/bug-unrtf/2025-11/msg00001.html | Mailing List |
| https://savannah.gnu.org/projects/unrtf/ | Product |
| https://www.gnu.org/software/unrtf/ | Product |
Configurations
History
06 Jan 2026, 17:31
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:unrtf_project:unrtf:0.21.10:*:*:*:*:*:*:* | |
| First Time |
Unrtf Project unrtf
Unrtf Project |
|
| References | () https://github.com/MAXEUR5/Vulnerability_Disclosures/blob/main/2025/CVE-2025-65410.md - Exploit, Third Party Advisory | |
| References | () https://hg.savannah.gnu.org/hgweb/unrtf/rev/a5d3b025a8b1 - Broken Link | |
| References | () https://lists.gnu.org/archive/html/bug-unrtf/2025-11/msg00001.html - Mailing List | |
| References | () https://savannah.gnu.org/projects/unrtf/ - Product | |
| References | () https://www.gnu.org/software/unrtf/ - Product |
30 Dec 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Dec 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-121 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.2 |
23 Dec 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-23 17:15
Updated : 2026-01-06 17:31
NVD link : CVE-2025-65410
Mitre link : CVE-2025-65410
CVE.ORG link : CVE-2025-65410
JSON object : View
Products Affected
unrtf_project
- unrtf
CWE
CWE-121
Stack-based Buffer Overflow