Heap Buffer Overflow in Netpbm Affects Multiple Versions
CVE-2026-120435
8.5HIGH
What is CVE-2026-120435?
Netpbm versions prior to 10.86.51 and 11.x versions before 11.02.30, as well as 11.03 versions prior to 11.15.08, are susceptible to a heap buffer overflow in the xpmtoppm function. This vulnerability arises from the lack of validation for the characters-per-pixel value within the XPM header. An attacker may exploit this by providing a specially crafted XPM file where this value exceeds 3, potentially leading to crashes or enabling arbitrary code execution through the overflow of fixed 3-byte colorName hash entries.
Affected Version(s)
Netpbm 0 < 10.86.51
Netpbm 11.0 < 11.02.30
Netpbm 11.03 < 11.15.08
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Tristan Madani (Talence Security)
Bryan Henderson