MEDIUM 6.9 NVD
CVE-2026-115722
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or valu
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.
References
- https://github.com/diegonehab/rply/blob/75639e3f12755ca64559d45a4a0bcffc52e04ef8/rply.c#L1
- https://github.com/diegonehab/rply/blob/75639e3f12755ca64559d45a4a0bcffc52e04ef8/rply.c#L8
- https://github.com/diegonehab/rply/issues/10
- https://hackmd.io/@haindpwn/rply-property-list-type-confusion
- https://www.vulncheck.com/advisories/rply-through-1.1.4-out-of-bounds-function-pointer-ind
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-23 via NVD.
vulnfeed aggregates 15176 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.