PatchTheCVEunrtf project vulnerabilities
Recent CVEs affecting unrtf project products. 2 tracked.
unrtf project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-30. Highest priority: CVE-2025-65411 (score 48/100).
- CVE-2025-65411 HIGH 7.5 DOWNGRADE A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denia
- CVE-2025-65410 MEDIUM 6.2 DOWNGRADE A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Servi
FAQ
How do I fix unrtf project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unrtf project being exploited right now?
None of the tracked unrtf project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unrtf project CVE should I patch first?
CVE-2025-65411 currently ranks highest (48/100): A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denia.