CVE-2026-118590
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 29, 2026
Vendor
unknown
Description
A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.