PT-2026-115267 · Nifti Imaging · Nifti Clib

·

CVE-2026-111275

·

Published

2026-10-15

·

Updated

2026-10-15

CVSS v3.1

6.1

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
nifti clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti convert n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked. Attackers can supply a crafted 540-byte NIfTI-2 header read via nifti image read() to crash applications or corrupt stack memory.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-111275

Affected Products

Nifti Clib