CVE-2026-112276mediumCWE-125

CVE-2026-112276: medium-severity vulnerability in Netpbm

Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap

Published

Follow this CVE+ Monitor Netpbm+ Monitor netpbm-free

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.2%
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Netpbm · Netpbm
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Netpbm

In the same product, most dangerous first.

CVE-2026-120436HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnmEPSS 0.2%CVE-2026-120433HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPolyEPSS 0.2%CVE-2026-120432HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopamEPSS 0.2%CVE-2026-120437MEDIUMNetpbm before 10.86.51, 11.02.30, and 11.15.08 Out-of-Bounds Read via tgatoppmEPSS 0.2%CVE-2026-120435HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppmEPSS 0.1%CVE-2026-120434HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPolyEPSS 0.1%