CVE-2026-111143

The libansilove library (versions through 1.4.2 ) is vulnerable to an out-of-bounds read in the ansilove_xbin() function located in src/loaders/xbin.c. The root cause is a lack of bounds checks for compressed run-length records . An attacker can provide a specially crafted compressed XBIN file en...