CVE-2026-120434

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's scanPoly function in converter/ppm/picttoppm.c. Attackers can supply a crafted PICT file whose polygon edges produce more than 5000 points, overflowing the coord stack arr...

CVE-2026-120434

The Netpbm software (versions before 10.86.51 , 11.x before 11.02.30 , and 11.03 before 11.15.08 ) is vulnerable to a stack-based buffer overflow in the scanPoly() function within converter/ppm/picttoppm.c. An attacker can provide a crafted PICT file where polygon edges generate more than 5000 po...

EUVD-2026-115194

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's scanPoly function in converter/ppm/picttoppm.c. Attackers can supply a crafted PICT file whose polygon edges produce more than 5000 points, overflowing the coord stack arr...