CVE-2025-65410

Medium · 6.2

CVSS

6.2

EPSS

0.2%

Published

Dec 23, 2025

CISA due date

—

The record

A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed