Threats tagged 'ghsa-vm8g-xfgm-cjmm'

Netpbm versions before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contain a stack-based buffer overflow vulnerability in the picttoppm utility's scanPoly() function. This flaw occurs when processing crafted PICT files with polygon edges exceeding 5000 points, leading to overflow of the coord stack array. Exploitation can cause a crash or potentially allow code execution.