Tnef Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 9
    Known Exploited: 0
    1
    Critical Level Threats
    4
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-103680

    Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

    Last Modified: Oct 05, 2026
    Published: Oct 01, 2026

    CVE-2026-103679

    Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

    Last Modified: Oct 05, 2026
    Published: Oct 01, 2026

    CVE-2026-103678

    Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

    Last Modified: Oct 05, 2026
    Published: Oct 01, 2026

    CVE-2019-18849

    In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

    Last Modified: Nov 21, 2024
    Published: Nov 11, 2019

    CVE-2017-8911

    An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.

    Last Modified: Apr 20, 2025
    Published: May 12, 2017
    Items Per Page