Netpbm vulnerabilities
CVEs whose affected-version data names the Netpbm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112275Medium· 6.1Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and…
▾ SunlitNetpbm · Netpbmvia CVEORG
CVE-2026-112276Medium· 6.1PoCNetpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel byt…
▾ TwilightNetpbm · Netpbmvia CVEORG