UBUNTU-CVE-2026-120433: Buffer Overflow
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly() function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array, causing crashes or potentially code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 10.86.51 - Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 11.02.30 - Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 11.15.08
Event History
Frequently Asked Questions
What must an attacker provide to trigger the flaw?
An attacker must supply a crafted PICT file containing a polygon with more than 100 points and cause it to be processed by the picttoppm utility.
Is user interaction required?
Yes. The vector specifies user interaction as required, so a user or automated workflow would need to process the crafted PICT file.
What could happen if exploitation succeeds?
The overflow can crash picttoppm and may allow code execution by overwriting the fixed pts array on the stack.
Which Netpbm release lines are affected?
Affected releases are Netpbm versions before 10.86.51, 11.x before 11.02.30, and 11.03 releases before 11.15.08.