CVE-2026-111145 | Yeraze ytnef up to 2.1.2 RTF Decompression lib/ytnef.c DecompressRTF uncompressedSize out-of-bounds

October 15, 2026 Yanac

A vulnerability was found in Yeraze ytnef up to 2.1.2. It has been rated as problematic. The affected element is the function DecompressRTF of the file lib/ytnef.c of the component RTF Decompression. The manipulation of the argument uncompressedSize leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-111145. The attack must be carried out locally. There is no available exploit.VulDB Recent EntriesRead More