CVE-2007-2956: Pfstools

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (2) src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.

Affected products

• Pfstools Pfstools: version 1.6.2 only
• Qtpfsgui Qtpfsgui: version 1.8.11 only

Published 2007-08-13. Last modified 2026-06-16.