CVE-2026-118590

    Dashboard / Vulnerabilities / CVE-2026-118590

    CVE-2026-118590

    Published: 29 Oct 2026Last Modified: 5 Nov 2026

    Summary: nipy nibabel Header volumeutils.py array_from_file memory allocation

    Details: A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

    References: https://github.com/nipy/nibabel/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/118xxx/CVE-2026-118590.json, https://nvd.nist.gov/vuln/detail/CVE-2026-118590, https://vuldb.com/cve/CVE-2026-118590, https://vuldb.com/submit/1026208, https://vuldb.com/vuln/428028, https://github.com/nipy/nibabel/issues/1566, https://vuldb.com/vuln/428028/cti, https://github.com/nipy/nibabel/pull/1587

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 4602d9231d966c880dfb32f2621c48ec47d874fb
    Fixed -None

    Affected versions

    5.4.0
    5.4.1
    5.4.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-118590 | CVE-DB