Threats tagged 'ghsa-53w3-xv39-2p7m'

Netpbm versions prior to 10.86.51, 11.02.30, and 11.15.08 contain an integer overflow vulnerability in the winicontopam component. This flaw allows attackers to supply crafted icon files with dimensions exceeding 32767, causing integer overflow in 16-bit signed loop counters. The overflow leads to negative row buffer indices, resulting in heap memory corruption that can cause application crashes or potentially enable code execution.