CVE-2017-5849

PoC ×2—

CVSS 3.0

5.5 medium

EPSS

2%p79

Published

Mar 15, 2017 (Mar 15, 2017)

Modified

Jun 17, 2026

Description

tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.

Vendors: fedoraproject netpbm project
Products: fedora, netpbm
Weakness: CWE-125, CWE-787
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.