CVE-2026-111275: Out-of-bounds Write in NIFTI-Imaging nifti_clib

The vulnerability CVE-2026-111275 affects nifti_clib versions up to 3.0.1. It is a stack-based out-of-bounds read and write flaw in the function nifti_convert_n2hdr2nim(), which fails to validate the NIfTI-2 dim[0] field properly. This allows an attacker to provide a crafted NIfTI-2 header of 540 bytes through the nifti_image_read() interface, leading to potential crashes or corruption of stack memory. The CVSS 4.0 score is 6.9 (medium severity), with local attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on availability.

Successful exploitation can cause application crashes or stack memory corruption, potentially leading to denial of service or undefined behavior in applications using the vulnerable nifti_clib library. There is no indication of remote exploitation or privilege escalation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted NIfTI-2 headers or use additional input validation to limit the dim[0] value. Monitor vendor channels for official patches or updates.