Netpbm - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/netpbm/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 15:48:38 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNetpbm: Heap-based buffer overflow in sgitopnm (CVE-2026-120431)https://feed.craftedsignal.io/briefs/2026-11-netpbm-heap-overflow/Mon, 02 Nov 2026 15:48:38 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-netpbm-heap-overflow/Netpbm is vulnerable to a heap-based buffer overflow in the sgitopnm utility via crafted SGI image files, potentially allowing for arbitrary code execution.Netpbm versions before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 are affected by a heap-based buffer overflow vulnerability in the sgitopnm utility. The flaw exists within the readChannels() function and is triggered when processing RLE-compressed SGI images containing an oversized offset table. Successful exploitation can result in application crashes or arbitrary code execution.

Impact

Successful exploitation may lead to a crash of the sgitopnm utility (Denial of Service) or arbitrary code execution in the context of the user executing the tool.

Recommendation

  • Inventory all systems utilizing Netpbm or libraries relying on sgitopnm.
  • Update Netpbm to version 10.86.51, 11.02.29, 11.15.07, or later to address the vulnerability.
  • Implement file integrity monitoring for high-risk input processing pipelines that utilize legacy image processing libraries.
]]>highadvisoryvulnerabilityremote-code-executionbuffer-overflow