CVE-2026-112275— Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image
Quick assessment
Affected
Netpbm Netpbm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Netpbm 11.16.00 及更早版本在 文件中的 函数（Sun 光栅文件游程解码器 ）中存在堆缓冲区越界写入漏洞。攻击者可以提供一个字节编码的、具有极小尺寸但包含超长游程数据体的光栅文件，从而在 之后写入受控字节，导致内存损坏和程序崩溃。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112275
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image
Source: CVE Program / CVE List V5
Vulnerability Description
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-112275
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112275
请登录查看更多情报信息。
Other References for CVE-2026-112275 (5)
-
https://netpbm.sourceforge.net/ product
-
https://hackmd.io/@haindpwn/netpbm-sunraster-rle-oob-write-palette-oob-read third-party-advisory
-
https://sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rast.c technical-description
-
https://sourceforge.net/p/netpbm/code/5400/tree/super_stable/converter/other/rast.c technical-description
IV. Related Vulnerabilities
Same weakness: CWE-787
-
CVE-2026-110680
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl wri -
CVE-2026-112060
librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Write via -
CVE-2026-112059
libLAS through 1.8.1 Heap Out-of-Bounds Write via LASSchema -
CVE-2026-112018
cgltf through 1.15 Heap Out-of-Bounds Write via cgltf_access -
CVE-2026-112012
libtta through 2.3 Stack Out-of-Bounds Write via Zero Channe
V. Comments for CVE-2026-112275
No comments yet