PatchTheCVE: netpbmhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-2587: A memory allocation vulnerability was found in netpbm before 10.61https://patchthecve.com/cve/CVE-2017-2587.htmlhttps://patchthecve.com/cve/CVE-2017-2587.htmlWed, 17 Jun 2026 01:16:27 +0000LOW 3.3: A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.CVE-2017-2586: A null pointer dereference vulnerability was found in netpbm before 10.61https://patchthecve.com/cve/CVE-2017-2586.htmlhttps://patchthecve.com/cve/CVE-2017-2586.htmlWed, 17 Jun 2026 01:16:27 +0000LOW 3.3: A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.CVE-2017-2581: An out-of-bounds write vulnerability was found in netpbm before 10.61https://patchthecve.com/cve/CVE-2017-2581.htmlhttps://patchthecve.com/cve/CVE-2017-2581.htmlWed, 17 Jun 2026 01:16:26 +0000MEDIUM 4.5: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.CVE-2017-2580: An out-of-bounds write vulnerability was found in netpbm before 10.61https://patchthecve.com/cve/CVE-2017-2580.htmlhttps://patchthecve.com/cve/CVE-2017-2580.htmlWed, 17 Jun 2026 01:16:26 +0000MEDIUM 4.5: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.CVE-2017-2579: An out-of-bounds read vulnerability was found in netpbm before 10.61https://patchthecve.com/cve/CVE-2017-2579.htmlhttps://patchthecve.com/cve/CVE-2017-2579.htmlWed, 17 Jun 2026 01:16:26 +0000LOW 3.3: An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.CVE-2018-8975: The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cauhttps://patchthecve.com/cve/CVE-2018-8975.htmlhttps://patchthecve.com/cve/CVE-2018-8975.htmlWed, 17 Jun 2026 02:05:45 +0000MEDIUM 5.5: The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.CVE-2017-5849: tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remotehttps://patchthecve.com/cve/CVE-2017-5849.htmlhttps://patchthecve.com/cve/CVE-2017-5849.htmlWed, 17 Jun 2026 01:21:18 +0000MEDIUM 5.5: tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.