Live › vulnerability › CVE-2026-120431
Netpbm's sgitopnm tool has a heap buffer overflow when it reads RLE-compressed SGI images with oversized offset tables. An attacker who supplies a crafted SGI file can crash the program or potentially run code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 15:24 UTC. All times on this page are UTC.
Exposure comes from running sgitopnm on SGI files that may be attacker-supplied, such as image conversion pipelines or upload handlers. Systems that only convert trusted local images are lower risk. unknown whether the sources describe default configurations that invoke the vulnerable path.
No product ranges from the sources yet.
pnmcat --version or your package manager's query for netpbm.sgitopnm binary or a service that converts uploaded SGI images with it.10.86.51 is affected; upgrade to 10.86.51 or later in that line.11.x11.02.2911.02.2911.03 before 11.15.07 is affected; upgrade to 11.15.07 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels() function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the heap buffer, causing crashes or potential code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-120431")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.