Threats tagged 'ghsa-9ccj-5rg6-rhvw'

Netpbm versions before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contain a stack-based buffer overflow vulnerability in the picttoppm paintPoly() function. This flaw arises from an unbounded polygon point count, allowing attackers to supply a crafted PICT file with a polygon exceeding 100 points. Exploitation can lead to application crashes or potentially arbitrary code execution.