CVE-2005-2978

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index...

7.5 HighFix available

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.

Exploit likelihood

4.87%Up 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-2978
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-2978
Updated: 2026-11-02

EUVDEUVD-2005-2978 No score

Record: EUVD-2005-2978
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xf4f-2rfr-r287 No score

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index...

Record: GHSA-xf4f-2rfr-r287
Updated: 2026-11-02

OSV No score

Record: CVE-2005-2978
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-2978 No score

Record: DEBIAN-CVE-2005-2978
Updated: 2026-11-02

Affected products

netpbm

Affected packages

Affected packages
Package	Affected	Fixed
`netpbm-free` Debian:12	before 2:10.0-10	2:10.0-10
`netpbm-free` Debian:13	before 2:10.0-10	2:10.0-10
`netpbm-free` Debian:14	before 2:10.0-10	2:10.0-10
`netpbm-free` Debian:3.1	before 2:10.0-8sarge1, plus listed versions 2:10.0-8	2:10.0-8sarge1
`netpbm` Red Hat:enterprise_linux:4::as	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-debuginfo` Red Hat:enterprise_linux:4::as	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-devel` Red Hat:enterprise_linux:4::as	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-progs` Red Hat:enterprise_linux:4::as	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm` Red Hat:enterprise_linux:4::desktop	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`netpbm-devel` Red Hat:enterprise_linux:4::desktop	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-progs` Red Hat:enterprise_linux:4::desktop	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm` Red Hat:enterprise_linux:4::es	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-debuginfo` Red Hat:enterprise_linux:4::es	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-devel` Red Hat:enterprise_linux:4::es	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-progs` Red Hat:enterprise_linux:4::es	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm` Red Hat:enterprise_linux:4::ws	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-devel` Red Hat:enterprise_linux:4::ws	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2
`netpbm-progs` Red Hat:enterprise_linux:4::ws	before 0:10.25-2.EL4.2	0:10.25-2.EL4.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2978 is a high vulnerability (CVSS 7.5) in Netpbm, published October 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.87%, the 92nd percentile. Fixed in netpbm-free 2:10.0-10.

References

Show 20 moreShow less