DEBIAN-CVE-2026-120433: Buffer Overflow
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly() function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array, causing crashes or potentially code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 10.86.51 - Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 11.02.30 - Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 11.15.08
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using Netpbm versions before 10.86.51, 11.x before 11.02.30, or 11.03 before 11.15.08 are affected. Exposure is relevant where picttoppm processes PICT files, particularly files obtained from untrusted sources.
What does exploitation require?
An attacker must provide a crafted PICT file containing a polygon with more than 100 points. The supplied CVSS vector indicates user interaction is required.
What is the potential impact?
The overflow can crash the affected process and may allow code execution. The vulnerability has high confidentiality, integrity, and availability impacts in the supplied CVSS assessment.
How can I determine whether remediation is needed?
Identify the installed Netpbm version and compare it with the affected version ranges. The provided data does not specify a Debian package build containing the fix.