CVE-2026-118590 | nipy nibabel up to 5.4.2 Header nibabel/volumeutils.py array_from_file memory allocation (Issue 1566)

October 28, 2026 Yanac

A vulnerability was found in nipy nibabel up to 5.4.2. It has been classified as problematic. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation.

This vulnerability is uniquely identified as CVE-2026-118590. The attack is possible to be carried out remotely. No exploit exists.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More