Integer overflow in the readpgm function in pnm.c for...
High severity
Unreviewed
Published
May 1, 2022
to the GitHub Advisory Database
•
Updated Feb 18, 2024
Description
Published by the National Vulnerability Database
Apr 15, 2005
Published to the GitHub Advisory Database
May 1, 2022
Last updated
Feb 18, 2024
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.
References