Is CVE-2026-118590 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-118590?

CVE-2026-118590 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-118590

Description

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.