CVE-2026-115722
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
39/100
Published: 2026-10-23
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Passive
AT:
None
VC:
None
VI:
Low
VA:
High
Description
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| diegonehab | rply | 0 |