DEBIAN-CVE-2026-120434: Buffer Overflow
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's scanPoly() function in converter/ppm/picttoppm.c. Attackers can supply a crafted PICT file whose polygon edges produce more than 5000 points, overflowing the coord stack array to crash the converter or potentially execute code.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems that use the picttoppm converter from affected Netpbm versions to process PICT files are exposed. Exploitation requires a crafted PICT file with polygon edges that generate more than 5000 points.
What access does an attacker need?
The vector is local and requires user interaction. An attacker must get a user or workflow to process the crafted PICT file with picttoppm; no privileges are required according to the supplied CVSS vector.
What can happen if exploitation succeeds?
The stack-based overflow can crash the converter and may allow code execution. The provided severity vector indicates potential high impact to confidentiality, integrity, and availability.