NVD security advisoryHigh
High advisory for Netpbm
CVE-2026-120436 · Reported 2 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
NetpbmAffected product
Advisory overview
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the undersized buffer, causing crashes or potentially code execution.
Related references
- https://sourceforge.net/p/netpbm/code/5324/
- https://svn.code.sf.net/p/netpbm/code/!svn/bc/5323/trunk/converter/other/jbig/jbigtopnm.c
- https://svn.code.sf.net/p/netpbm/code/!svn/bc/5357/advanced/doc/HISTORY
- https://svn.code.sf.net/p/netpbm/code/!svn/bc/5358/stable/doc/HISTORY
- https://svn.code.sf.net/p/netpbm/code/!svn/bc/5371/super_stable/doc/HISTORY
- https://www.vulncheck.com/advisories/netpbm-before-10.86.51-11.02.30-and-11.15.08-heap-overflow-via-jbigtopnm