The vulnerability is a stack-based buffer overflow occurring in the picttoppm tool within Netpbm. An attacker can supply a crafted PICT file that contains a polygon with more than 100 points, causing the program to overwrite a fixed-size array during the paintPoly() function. This bug can lead to program crashes and, depending on the execution context, potential code execution as the overflow may overwrite return addresses or other control data. The weakness is classified as CWE-121, indicating a classic unbounded buffer misuse.

Vendor Netpbm, product Netpbm, version 10.86.50 and earlier, 11.x versions prior to 11.02.30, and 11.03 prior to 11.15.08. All releases before these patch points are vulnerable and should be upgraded to the specified secure releases or later.

The CVSS score is 8.5, reflecting a high severity of the flaw. The EPSS score is not available, and the vulnerability is not in CISA KEV. It is inference that the attack vector is local, requiring the attacker to run picttoppm with a malicious file. If the tool is exposed to untrusted users or network inputs, the risk rises, as a crafted PICT file could be executed indirectly. The primary threat is potential remote code execution in environments where netpbm processes untrusted files.