UnRTF by the GNU Project is vulnerable to an out‑of‑bounds write. When an attacker crafts an RTF file that triggers this flaw, the program may attempt to write beyond the limits of an allocated buffer, causing the process to crash and resulting in a denial‑of‑service. The vulnerability does not provide code execution or data disclosure capabilities; its primary impact is availability disruption.

The affected system is the GNU UnRTF utility distributed by the GNU Project. No specific version range is listed, so any installed instance that has not applied a fix poses a risk.

The CVSS score of 5.1 reflects moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, implying that exploitation is either low or not yet confirmed. The description implies local exploitation by a user who can open a malicious RTF file, leading to a denial‑of‑service. No known remote attack vector or privilege escalation path is documented.