UBUNTU-CVE-2026-120435: Buffer Overflow
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte colorName hash entries, causing crashes or potentially code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 10.86.51 - Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 11.02.30 - Upgrade
Upgrade
Netpbmto a version that resolves this vulnerability.Fixed in 11.15.08
Event History
Frequently Asked Questions
What conditions are required to exploit this issue?
An attacker must get a crafted XPM file processed by the xpmtoppm utility. The file's XPM header must specify a characters-per-pixel value greater than 3; user interaction is required according to the supplied severity vector.
Which Netpbm versions are affected?
Affected versions are Netpbm releases before 10.86.51, 11.x releases before 11.02.30, and 11.03 releases before 11.15.08.
What can happen if a vulnerable system processes a malicious XPM file?
The crafted header value can overflow fixed 3-byte colorName hash entries on the heap. This can crash the affected process and may allow code execution.