Approved changes feed: RSS · Atom
cpe:2.3:a:netpbm_project:netpbm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Netpbm Project (9884439f-15c0-5a64-876a-4e6b7f949b05) |
|---|---|
| Product | Netpbm (7d96e4bb-efff-5b23-9973-2963dc643d95) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/netpbm-free |
purl2cpe | 2026-06-01 10:16:06.194728 |
pkg:deb/ubuntu/netpbm-free |
purl2cpe | 2026-06-01 10:16:06.194732 |
pkg:github/t6/netpbm |
purl2cpe | 2026-06-01 10:16:06.194736 |
pkg:gitlab/redhat/netpbm |
purl2cpe | 2026-06-01 10:16:06.194739 |
pkg:rpm/centos/netpbm |
purl2cpe | 2026-06-01 10:16:06.194744 |
pkg:rpm/fedora/netpbm |
purl2cpe | 2026-06-01 10:16:06.194748 |
pkg:rpm/opensuse/netpbm |
purl2cpe | 2026-06-01 10:16:06.194752 |
pkg:sourceforge/netpbm |
purl2cpe | 2026-06-01 10:16:06.194756 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112276 |
vulnerable | 2026-11-03 10:16:28.596464 |
Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap
MEDIUM (6.1)
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
Published: 2026-10-19T13:55:22.723Z
Updated: 2026-10-19T14:13:40.705Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-112275 |
vulnerable | 2026-11-03 10:16:28.029286 |
Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image
MEDIUM (6.1)
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
Published: 2026-10-19T13:55:22.019Z
Updated: 2026-10-19T16:34:48.175Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8975 |
vulnerable | 2026-06-08 05:12:06.776714 |
Details available
The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.
Published: 2018-03-25T03:00:00.000Z
Updated: 2024-08-05T07:10:47.351Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2587 |
vulnerable | 2026-06-08 05:09:24.695946 |
Details available
LOW (3.3)
A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
Published: 2018-07-27T18:00:00.000Z
Updated: 2024-08-05T13:55:06.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2586 |
vulnerable | 2026-06-08 05:09:24.695585 |
Details available
LOW (3.3)
A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
Published: 2018-07-27T18:00:00.000Z
Updated: 2024-08-05T13:55:06.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2581 |
vulnerable | 2026-06-08 05:09:24.681531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.