CVE-2026-103678

Name of the Vulnerable Software and Affected Versions tnef (affected versions not specified)

Description A flaw exists where the application fails to properly validate input buffer boundaries before copying data in the get rtf data from buf() function. An attacker can exploit this by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data, causing the application to read beyond the allocated memory. This can result in a Denial of Service (DoS) due to application crashes or the leakage of sensitive memory contents into extracted output files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.