CVE-2026-109831: Medium severity GNU Project UnRTF vulnerability
Published Oct 20, 2026
·Updated
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
Affected Software
1 affected component
GNU Project UnRTF
Event History
Oct 20, 2026
CVE Published
via MITRE·04:34 AM
Data Sourced
via MITRE·04:34 AM
DescriptionSeverity
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What attacker interaction is required for exploitation?
An attacker must provide a crafted RTF file and persuade a user to open it with UnRTF. No attacker privileges are required.
2
What is the expected impact?
The reported impact is a denial-of-service condition caused by an out-of-bounds write. The supplied information indicates low integrity and availability impact, with no confidentiality impact.
3
Who is exposed?
Systems are exposed when UnRTF is used to open RTF files from an attacker or another untrusted source. The provided information does not identify affected versions or configurations.