CVE-2026-120436

A flaw was found in Netpbm's jbigtopnm conversion utility. An integer overflow occurs when calculating output buffer dimensions for multi-plane JBIG (Joint Bi-level Image Experts Group) images with large header sizes, resulting in an undersized memory allocation. By convincing a user to process a specially crafted JBIG file, an attacker could trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.