diegonehab/rply vulnerabilities

Latest diegonehab/rply CVEs

Newest publication first

1. CVE-2026-115722 RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header

   Published 2026-10-23

   Medium·CVSS 6.9 EPSS 0.13%

   RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crash...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.