UnRTF, a command-line tool for converting RTF documents to various formats, has a vulnerability (CVE-2026-109831) involving an out-of-bounds write. This flaw can be triggered by opening a specially crafted RTF file, potentially causing a denial-of-service (DoS) condition. A fix is available in version 0.21.13-1.oe2403sp4.