{"id":"AZL-109460","summary":"CVE-2026-112275 affecting package netpbm 10.90.00-6","details":"Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.","modified":"2026-10-20T14:17:49.853070907Z","published":"2026-10-19T14:17:05Z","upstream":["CVE-2026-112275"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112275"}],"affected":[{"package":{"name":"netpbm","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/netpbm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"10.90.00-6"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109460.json"}}],"schema_version":"1.9.0"}