UnRTF, a command-line tool for converting Rich Text Format documents to various formats, has a vulnerability (CVE-2026-109831) involving an out-of-bounds write. This flaw can be triggered by processing a specially crafted RTF file, potentially causing a denial-of-service (DoS) condition. A fix for this vulnerability is available in version 0.21.13-1.oe2403sp1.