CVE-2026-118590

5.3 MEDIUMpublic exploit available

Published 2026-10-29 · Updated 2026-10-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses

CWE-400, CWE-789

Public exploit & PoC references

https://github.com/nipy/nibabel/
https://github.com/nipy/nibabel/issues/1566
https://github.com/nipy/nibabel/pull/1587

All references

https://github.com/nipy/nibabel/
https://github.com/nipy/nibabel/issues/1566
https://github.com/nipy/nibabel/pull/1587
https://vuldb.com/cve/CVE-2026-118590
https://vuldb.com/submit/1026208
https://vuldb.com/vuln/428028
https://vuldb.com/vuln/428028/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-105749PoC
UNSCOREDCVE-2026-108359PoC
MEDIUMCVE-2026-108683PoC
MEDIUMCVE-2026-109149PoC
UNSCOREDCVE-2026-111108
UNSCOREDCVE-2026-111551
UNSCOREDCVE-2026-114349
HIGHCVE-2026-115907PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.