CVE-2026-120434

The Netpbm software (versions before 10.86.51 , 11.x before 11.02.30 , and 11.03 before 11.15.08 ) is vulnerable to a stack-based buffer overflow in the scanPoly() function within converter/ppm/picttoppm.c. An attacker can provide a crafted PICT file where polygon edges generate more than 5000 po...

CVE-2026-120433 Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPoly

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array...

CVE-2026-120433 Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPoly

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array...

CVE-2026-120433

The Netpbm image processing library is vulnerable to a stack-based buffer overflow in the picttoppm component. The flaw exists in the paintPoly() function, where an unbounded polygon point count allows an attacker to provide a crafted PICT file with more than 100 points. This can overwrite the fi...

EUVD-2026-115193

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array...

CVE-2026-120432 Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopam

Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16t loop counters into...

EUVD-2026-115241

Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16t loop counters into...

CVE-2026-120432

Netpbm versions before 10.86.51 , 11.02.30 , and 11.15.08 are vulnerable to an integer overflow in the winicontopam component. An attacker can provide a crafted icon file with ICO/CUR dimensions exceeding 32767 , causing int16_t loop counters to wrap into negative row buffer indices. This leads t...

CVE-2026-120432 Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopam

Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16t loop counters into...

CVE-2026-120431

The Netpbm image processing library contains a heap-based buffer overflow in the sgitopnm component's readChannels() function. This vulnerability occurs when processing RLE-compressed SGI images with crafted files containing oversized offset table lengths. An attacker can exploit this to write co...

CVE-2026-120431 Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer Overflow

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

EUVD-2026-115240

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

Astra Linux – vulnerability in Chromium

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

A race condition in Core in Google Chrome prior to version 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome’s V8 engine, use-after-free vulnerabilities were permitted prior to version 153.0.8010.47; this allowed a remote attacker to execute arbitrary code within the sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.47, using “After Free” in Input within Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In WebProtect within Google Chrome prior to version 154.0.8037.57, incorrect reference resolution allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.47, using “After Free” in Input within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome’s PDFium, use after free functionality was permitted prior to version 153.0.8010.52; this allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

After using “free” in Fullscreen within Google Chrome prior to version 154.0.8037.57, a remote attacker could potentially execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: Critical...