Medium severity6.1NVD Advisory· Published Oct 19, 2026
CVE-2026-112275
CVE-2026-112275
Description
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
Affected products
1Patches
Vulnerability mechanics
References
5- hackmd.io/@haindpwn/netpbm-sunraster-rle-oob-write-palette-oob-readnvd
- netpbm.sourceforge.netnvd
- sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rast.cnvd
- sourceforge.net/p/netpbm/code/5400/tree/super_stable/converter/other/rast.cnvd
- www.vulncheck.com/advisories/netpbm-through-11.16.00-heap-out-of-bounds-write-via-rasttopnm-pr-load-imagenvd
News mentions
0No linked articles in our index yet.