CVE-2026-112276

A flaw was found in the rasttopnm utility of Netpbm. An attacker could exploit this by enticing a user to convert a specially crafted Sun rasterfile image with a truncated color palette, triggering an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service (DoS) by crashing the application or allow unauthorized information disclosure by exposing adjacent memory contents in the generated output.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.