CVE-2020-21677

2021-08-1021:15:07

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.

CPENameOperatorVersion
libsixeleq1.3.0
libsixeleq1.8.1
libsixeleq1.8.4
libsixeleq0.15.0
libsixeleq0.19.2
libsixeleq1.7.2
libsixeleq1.2.3
libsixeleq0.14.0
libsixeleq1.1.0
libsixeleq0.19.6

Name	Operator	Version
libsixel	eq	1.3.0
libsixel	eq	1.8.1
libsixel	eq	1.8.4
libsixel	eq	0.15.0
libsixel	eq	0.19.2
libsixel	eq	1.7.2
libsixel	eq	1.2.3
libsixel	eq	0.14.0
libsixel	eq	1.1.0
libsixel	eq	0.19.6