Live › vulnerability › CVE-2026-112275
Go to dashboardNetpbm through 11.16.00 has a heap out-of-bounds write in the Sun rasterfile run-length decoder (pr_load_image in converter/other/rast.c) used by rasttopnm. A crafted rasterfile with tiny dimensions and a long run-length body writes attacker-controlled bytes past a heap buffer, causing memory corruption and crashes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that run rasttopnm or other Netpbm converters on untrusted Sun rasterfile (.ras) input, such as image-processing pipelines that accept user uploads. Sites that only process trusted images or do not use Netpbm can skip it. unknown beyond that.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
This page as .md · .json · in your agent: get_signal("CVE-2026-112275")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.