CVE-2026-115722: Improper Validation of Array Index in diegonehab rply

The rply library (diegonehab project) through version 1.1.4 contains an improper array index validation vulnerability in the ply_read_header_property() function. This function incorrectly accepts a list as a list property's length or value type. An attacker can supply a specially crafted PLY file that causes the ply_read_list_property() function to invoke an out-of-bounds handler. This results in either a crash during ASCII parsing or memory corruption during binary parsing of the PLY file.

Successful exploitation can lead to denial of service via application crash or potential memory corruption, which might be leveraged for further attacks depending on the context. The CVSS 4.0 base score is 6.9 (medium severity), reflecting local attack vector, low attack complexity, no privileges required, user interaction needed, no confidentiality or integrity impact, but high availability impact.

No patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted or unauthenticated PLY files with affected versions of the rply library.