UBUNTU-CVE-2026-120431: Buffer Overflow
Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels() function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the heap buffer, causing crashes or potential code execution.
Affected Software
Event History
Frequently Asked Questions
What would an attacker need to exploit this issue?
An attacker would need to provide a crafted RLE-compressed SGI image with oversized offset table lengths and have it processed by sgitopnm. The supplied vector indicates local access and user interaction are required, while no privileges are required.
Which Netpbm versions are affected?
Affected versions are Netpbm releases before 10.86.51, 11.x releases before 11.02.29, and 11.03 releases before 11.15.07.
What is the likely impact if exploitation succeeds?
The heap-based buffer overflow can cause a crash or potentially allow code execution. The vulnerability is rated high severity with high confidentiality, integrity, and availability impact.