CVE-2026-112276mediumCWE-125

CVE-2026-112276: fallo de gravedad media en Netpbm

Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap

Publicada el

Seguir esta CVE+ Monitorear Netpbm+ Monitorear netpbm-free

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 6.9epss 0.2%
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
Netpbm · Netpbm
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Netpbm

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-120436HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnmEPSS 0.2%CVE-2026-120433HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPolyEPSS 0.2%CVE-2026-120432HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopamEPSS 0.2%CVE-2026-120437MEDIUMNetpbm before 10.86.51, 11.02.30, and 11.15.08 Out-of-Bounds Read via tgatoppmEPSS 0.2%CVE-2026-120435HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppmEPSS 0.1%CVE-2026-120434HIGHNetpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPolyEPSS 0.1%