CVE-2026-111275: nifti_clib 0 through 3.0.1

Affected technology

nifti_clib · 0 through 3.0.1
NIFTI-Imaging

Description’s affected range: through 3.0.1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can supply a crafted 540-byte NIfTI-2 header read via nifti_image_read() to crash applications or corrupt stack memory. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as none; integrity impact as low; availability impact as high.