TI-2026-65750 CVE-2026-103680 · GHSA-qr96-v34j-wcrq
Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
Priority LOW 29
A flaw was found in tnef.
Vulnerabilities
9 records
TI-2026-65749 CVE-2026-103679 · GHSA-hh3v-7rq2-8fq9
Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
Priority LOW 29
A flaw was found in tnef.
TI-2026-65748 CVE-2026-103678 · GHSA-8r4j-263j-fh85
Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value
Priority LOW 35
A flaw was found in tnef.
TI-2019-13584 CVE-2019-18849 · GHSA-cq6j-h35c-x8gr
In tnef before 1.4.18, an attacker may be able to write to the victim's…
Priority LOW 27
In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read…
TI-2017-06404 CVE-2017-8911 · GHSA-575j-8r4j-2fmq
An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14.
Priority MEDIUM 46
An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14.
TI-2017-04142 CVE-2017-6310 · GHSA-3pcq-f86j-jh8q
An issue was discovered in tnef before 1.4.13.
Priority LOW 37
An issue was discovered in tnef before 1.4.13.
TI-2017-04141 CVE-2017-6309 · GHSA-69j8-qm33-j976
An issue was discovered in tnef before 1.4.13.
Priority LOW 37
An issue was discovered in tnef before 1.4.13.
TI-2017-04140 CVE-2017-6308 · GHSA-pf7f-x7x4-c238
An issue was discovered in tnef before 1.4.13.
Priority LOW 37
An issue was discovered in tnef before 1.4.13.
TI-2017-04139 CVE-2017-6307 · GHSA-p3gc-pjgj-g65j
An issue was discovered in tnef before 1.4.13.
Priority LOW 37
An issue was discovered in tnef before 1.4.13.