Heap Out-of-Bounds Write Vulnerability in Netpbm and Sun Rasterfile Decoder
CVE-2026-112275

6.9MEDIUM

Key Information:

Vendor

Netpbm

Status
Netpbm
Vendor
CVE Published:
19 October 2026

What is CVE-2026-112275?

The affected version of Netpbm, specifically through 11.16.00, exhibits a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder. This issue arises from the ability of attackers to provide a specifically crafted byte-encoded rasterfile with minimal dimensions but an excessive run-length body. As a result, the vulnerability allows these attackers to manipulate memory, leading to memory corruption and potential application crashes.

Affected Version(s)

Netpbm 0 <= 11.16.00

References

https://hackmd.io/@haindpwn/netpbm-sunraster-rle-oob-writ...
third-party-advisory
https://sourceforge.net/p/netpbm/code/5400/tree/advanced/...
technical-description
https://sourceforge.net/p/netpbm/code/5400/tree/super_sta...
technical-description

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.