PatchSiren

NIFTI-Imaging CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM NIFTI-Imaging CVE published 2026-10-15

CVE-2026-111275

A stack-based out-of-bounds read and write vulnerability exists in nifti_clib through 3.0.1 in the nifti_convert_n2hdr2nim() function due to a lack of range checking on the NIfTI-2 dim[0] value. This can be exploited by supplying a crafted 540-byte NIfTI-2 header, potentially causing application crashes or stack memory corruption. The vulnerability can be triggered by a crafted NIfTI-2 header, which may l [truncated]