nifti_clib through version 3.0.1 contains a stack-based out‑of‑bounds read and write vulnerability in the function nifti_convert_n2hdr2nim, where the NIfTI‑2 dim[0] field is never range‑checked. This allows an attacker to provide a 540‑byte NIfTI‑2 header that the library will parse without validation. The unchecked dimension can cause the routine to read beyond the bounds of a stack buffer and then write beyond the buffer, leading to a crash or memory corruption. The flaw is catalogued as CWE‑787 and can compromise the stability and integrity of any application that uses the vulnerable library to read NIfTI‑2 files.

The affected product is the NIFTI‑Imaging:nifti_clib library, all releases up to and including 3.0.1. Any application that includes or links against these versions and calls nifti_image_read to process NIfTI‑2 files is at risk. This includes both desktop and server‑side medical imaging software that accepts user supplied headers. No other vendors or products are explicitly mentioned in the data.

The CVSS score of 6.9 classifies this as a medium‑severity issue. The EPSS score is reported as less than 1 percent, indicating a very low probability of exploitation at this time, and the flaw is not listed in the CISA KEV catalog, so no publicly known exploits are documented. Based on the description, it is inferred that the attack vector requires an attacker to deliver a specially crafted NIfTI‑2 header to a process that calls nifti_image_read – for example, by placing a malicious file on a disk that the application will read or by sending data over a network if the application accepts remote uploads. Because the vulnerability involves a stack buffer overflow with no direct evidence of code execution, the primary risk is denial of service or accidental memory corruption rather than privilege escalation or remote code execution.