CVE-2016-10091: Unrtf Project Unrtf

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.

Affected products

• Unrtf Project Unrtf: version 0.21.9 only

Published 2017-04-21. Last modified 2026-06-17.