CVE-2017-8911: Tnef Project Tnef

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.

Affected products

Published 2017-05-12. Last modified 2026-06-17.