Threats tagged 'ghsa-9wp8-mmj7-87m8'

A heap buffer overflow vulnerability exists in Netpbm's xpmtoppm utility before versions 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08. The flaw arises from an unvalidated characters-per-pixel value in the XPM header, allowing crafted XPM files with characters-per-pixel greater than 3 to overrun fixed 3-byte colorName hash entries. This can cause application crashes or potentially enable code execution.