PT-2026-21630

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A signed integer overflow in ImageMagick's SIXEL decoder can lead to memory...

CVE-2026-25970: Integer Overflow or Wraparound

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a...

PT-2026-24123

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the SIXEL decoder that allows an attacker to cause an out-of-bounds write through a specially crafted...

PT-2026-25070

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is free and open-source software used for editing and manipulating digital images. Before versions 7.1.2-16 and 6.9.13-41, a failure in memo...

[SECURITY] Fedora 42 Update: timg-1.6.3-5.fc42

A user-friendly terminal image viewer that uses graphic capabilities of terminals Sixel, Kitty or iTerm2, or 24-bit color capabilities and Unicode character blocks if these are not available. On terminals that implement the Sixel protocol, the Kitty Graphics Protocol, or the iTerm2 Graphics...

[SECURITY] Fedora 43 Update: timg-1.6.3-5.fc43

A user-friendly terminal image viewer that uses graphic capabilities of terminals Sixel, Kitty or iTerm2, or 24-bit color capabilities and Unicode character blocks if these are not available. On terminals that implement the Sixel protocol, the Kitty Graphics Protocol, or the iTerm2 Graphics...

The vulnerability of the sixeldebug_print_palette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeldebugprintpalette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the...

xterm security update

An update is available for xterm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The xterm program is a terminal emulator for the X Window System. It provides D...

RLSA-2025:14075 Moderate: xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fixes: xterm: Buffer overflow in setsixel in graphicssixel.c CVE-2022-24130 For more details about the...

RockyLinux 9 : xterm (RLSA-2025:14075)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:14075 advisory. xterm: Buffer overflow in setsixel in graphicssixel.c CVE-2022-24130 Tenable has extracted the preceding description block directly from the RockyLinux security...

EUVD-2022-29041

Malicious code in bioql PyPI...

EUVD-2021-33360

Malicious code in bioql PyPI...

[SECURITY] Fedora 43 Update: libsixel-1.10.5-4.fc43

An encoder/decoder implementation for DEC SIXEL graphics...

Linux Distros Unpatched Vulnerability : CVE-2020-36120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow in the sixelencoderencodebytes function of Libsixel v1.8.6 allows attackers to cause a Denial of Service DoS. CVE-2020-36120 Note that Nessus...

[SECURITY] Fedora 41 Update: libsixel-1.10.5-3.fc41

An encoder/decoder implementation for DEC SIXEL graphics...

[SECURITY] Fedora 42 Update: libsixel-1.10.5-4.fc42

An encoder/decoder implementation for DEC SIXEL graphics...

Linux Distros Unpatched Vulnerability : CVE-2020-21677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in the sixelencoderoutputwithoutmacro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service DOS via...

Linux Distros Unpatched Vulnerability : CVE-2019-19637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixeldecoderawimpl at fromsixel.c. CVE-2019-19637 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2020-21548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libsixel 1.8.3 contains a heap-based buffer overflow in the sixelencodehighcolor function in tosixel.c. CVE-2020-21548 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2022-24130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...