Vulnerability Description
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/diegonehab/rply/blob/75639e3f12755ca64559d45a4a0bcffc52e04ef8
- https://github.com/diegonehab/rply/blob/75639e3f12755ca64559d45a4a0bcffc52e04ef8
- https://github.com/diegonehab/rply/issues/10
- https://hackmd.io/@haindpwn/rply-property-list-type-confusion
- https://www.vulncheck.com/advisories/rply-through-1.1.4-out-of-bounds-function-p
- https://hackmd.io/@haindpwn/rply-property-list-type-confusion
FAQ
What is CVE-2026-115722?
CVE-2026-115722 is a vulnerability with a CVSS score of 6.1 (MEDIUM). RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted P...
How severe is CVE-2026-115722?
CVE-2026-115722 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-115722?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.