DEBIAN-CVE-2026-120436: Buffer Overflow
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbgdecmergeplanes() overflows the undersized buffer, causing crashes or potentially code execution.
Affected Software
Event History
Frequently Asked Questions
Which component and input format are involved?
The affected utility is jbigtopnm in Netpbm, and exploitation requires a crafted multi-plane JBIG file with large dimensions in its header.
What access does an attacker need to exploit this?
The supplied vector indicates local attack access and no privileges are required. User interaction is required, meaning a user must process or otherwise cause jbigtopnm to handle the crafted file.
Which Netpbm versions are affected?
Affected versions are Netpbm releases before 10.86.51, 11.x releases before 11.02.30, and 11.03 releases before 11.15.08.
What is the likely impact if exploitation succeeds?
The integer overflow can produce an undersized heap buffer and lead to a heap buffer overflow. This can crash the affected process and may allow code execution.