What’s Vulnerable › Vulnerabilities

CVE-2026-111275: nifti_clib through 3.0.1 Stack Out-of-Bounds Access via nifti_convert_n2hdr2nim

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-15 · updated 2026-10-21
• Weakness: CWE-787

Description

nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked. Attackers can supply a crafted 540-byte NIfTI-2 header read via nifti_image_read() to crash applications or corrupt stack memory.

Affected products

• NIFTI-Imaging nifti_clib: through 3.0.1

References

• https://github.com/NIFTI-Imaging/nifti_clib
• https://github.com/NIFTI-Imaging/nifti_clib/blob/96b9954fafcf3bd69a4ee2091b0d707ed2077697/nifti2/nifti2_io.c#L4985-L5026
• https://github.com/NIFTI-Imaging/nifti_clib/issues/195
• https://github.com/NIFTI-Imaging/nifti_clib/pull/197
• https://hackmd.io/@haind-pwn/nifticlib-nifti2-dim0-oob
• https://www.vulncheck.com/advisories/nifti-clib-through-3.0.1-stack-out-of-bounds-access-via-nifti-convert-n2hdr2nim
• https://hackmd.io/@haind-pwn/cve-2026-111275-nifticlib-nifti2-dim0-oob

Get alerted when CVE-2026-111275 or the next vulnerability affects your stack