PatchTheCVEunrtf vulnerabilities and fixes
Recent CVEs affecting unrtf, with upgrade or downgrade steps. 2 tracked.
unrtf has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-30. Highest priority: CVE-2025-65411 (score 48/100).
- CVE-2025-65411 HIGH 7.5 DOWNGRADE A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denia
- CVE-2025-65410 MEDIUM 6.2 DOWNGRADE A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Servi
FAQ
How do I fix unrtf vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unrtf being exploited right now?
None of the tracked unrtf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unrtf CVE should I patch first?
CVE-2025-65411 currently ranks highest (48/100): A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denia.