MEDIUMCVSS v3.1 6.1Vulnerability

CVE-2026-115722

RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-23T14:24:59.572098+00:00
Cvss severity
MEDIUM
Cvss score
6.1
Retrieved at
2026-10-23T14:28:01+00:00
Score
6.1
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-115722
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
First seen by Signal
2026-10-23T14:28:01+00:00
Name
CVE-2026-115722
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Published at
2026-10-23T12:18:12.720
Last modified
2026-10-23T12:18:12.720

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-115722 (CVSS v3.1 6.1) — Ninja Signal Threat Intelligence | Ninja Signal