Heap Buffer Overflow in Netpbm by Developer Netpbm Project

CVE-2026-120436

What is CVE-2026-120436?

The Netpbm library is affected by a heap buffer overflow vulnerability stemming from an integer overflow in the jbigtopnm function. This flaw allows attackers to create a specially crafted multi-plane JBIG file with excessively large header dimensions. When processed, this triggers an overflow in the output buffer, potentially leading to application crashes and risk of arbitrary code execution. This vulnerability highlights the importance of validating input sizes to prevent overflow conditions.

References