CVE-2005-3662: Greg Roelofs Pnmtopng

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.

Affected products

• Greg Roelofs Pnmtopng: version 2.37.3 only; version 2.37.4 only; version 2.37.5 only; version 2.37.6 only; version 2.38 only

Published 2005-11-18. Last modified 2026-06-16.