Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-07635
HistoryJan 27, 2022 - 12:00 a.m.

libsixel Denial of Service Vulnerability

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

31.4%

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has a denial of service vulnerability in v1.10.3 and earlier, which stems from a NULL pointer dereference in libsixel’s stb_image.h component, and can be exploited by an attacker to cause a denial of service via crafted PICT file to cause a denial of service (DOS).

CPENameOperatorVersion
libsixel libsixelle1.10.3

0.001 Low

EPSS

Percentile

31.4%