CVE-2026-120434

The Netpbm software (versions before 10.86.51 , 11.x before 11.02.30 , and 11.03 before 11.15.08 ) is vulnerable to a stack-based buffer overflow in the scanPoly() function within converter/ppm/picttoppm.c. An attacker can provide a crafted PICT file where polygon edges generate more than 5000 po...