Heap Buffer Overflow in Netpbm's SGI Image Processing Function
CVE-2026-120431

8.5HIGH

Key Information:

Vendor

Netpbm

Status
Netpbm
Vendor
CVE Published:
2 November 2026

What is CVE-2026-120431?

Netpbm versions prior to 10.86.51, along with select 11.x versions, feature a vulnerability in the sgitopnm's readChannels() function. This issue arises when processing RLE-compressed SGI images, allowing attackers to exploit crafted SGI files containing oversized offset table lengths. Such manipulation enables the writing of controlled data past the heap buffer, potentially leading to application crashes or arbitrary code execution.

Affected Version(s)

Netpbm 0 < 10.86.51

Netpbm 11.0 < 11.02.29

Netpbm 11.03 < 11.15.07

References

https://sourceforge.net/p/netpbm/code/5317/
patch
https://svn.code.sf.net/p/netpbm/code/!svn/bc/5319/stable...
release-notes
https://svn.code.sf.net/p/netpbm/code/!svn/bc/5318/advanc...
release-notes

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tristan Madani (Talence Security)
Bryan Henderson
.