AZL-109460
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109460.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109460
- Upstream
- CVE-2026-112275
- Published
- 2026-10-19T14:17:05Z
- Modified
- 2026-10-20T14:17:49Z
- Summary
- CVE-2026-112275 affecting package netpbm 10.90.00-6
- Details
-
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
- References