CVE-2026-112276 Details
Description
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
A heap out-of-bounds read vulnerability has been identified in Netpbm versions through 11.16.00, specifically within the Sun rasterfile reader component of the image toolkit. The issue arises in the 'rasttopnm' utility, where the program improperly handles Sun rasterfiles with short colormaps. This vulnerability allows attackers to craft colormapped rasterfiles that exceed the palette length, leading to the unintentional disclosure of up to 255 bytes of adjacent heap memory in the PNM output. Additionally, this flaw can cause the program to crash.
Users can upgrade to Netpbm version 11.16.1 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Netpbm | <= 11.16.00 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |