Multiple vulnerabilities in NetPBM 9.20 and earlier and possibly other versions may allow remote attackers to cause a denial of service or execute arbitrary code via \maths overflow errors\ such as (1) integer signedness errors or (2) integer overflows which lead to buffer overflows.