An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2580
http://www.securityfocus.com/bid/96712
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html