CVE-2017-12107: PL32 Photoline

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. A specially crafted .PCX file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .PCX file to trigger this vulnerability.

Affected products

• PL32 Photoline: version 20.02 only

Published 2018-04-24. Last modified 2026-06-17.