CVE-2017-5849: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days.

tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.

Affected products

• Fedoraproject Fedora: version 24 only; version 25 only
• Netpbm Project Netpbm: version 10.47.63 only

Published 2017-03-15. Last modified 2026-06-17.