CVE-2026-115722mediumCWE-129

CVE-2026-115722: medium-severity vulnerability in diegonehab rply

RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header

Published · Updated

Follow this CVE+ Monitor rply+ Monitor python-rply

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.1%
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
diegonehab · rply