Retour à la veille
CVE-2026-112276
Score CVSS
6.1
MEDIUM
Description détaillée
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
Vecteur d'attaque (CVSS)
Vecteur brut :CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Références et Patchs
https://hackmd.io/@haindpwn/netpbm-sunraster-rle-oob-write-palette-oob-readhttps://netpbm.sourceforge.net/https://sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rast.chttps://sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rasttopnm.chttps://www.vulncheck.com/advisories/netpbm-through-11.16.00-heap-out-of-bounds-read-via-rasttopnm-colormaphttps://hackmd.io/@haindpwn/cve-2026-112275-112276-netpbm-sunraster-rle-oob-write-palette-oob-read
Dernières Vulnérabilités
CVE-2026-77228
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
VOIR DÉTAILS
CVE-2026-77227
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
VOIR DÉTAILS
CVE-2026-77225
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
VOIR DÉTAILS