libsixel resource management error vulnerability (CNVD-2022-31765)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.10.0, which stems from the presence of post-release reuse in libsixel/src/dither.c:379. An attacker cou...

The vulnerability of the gif_process_raster function in the fromgif.c component of the SIXEL Libsixel encoder/decoder implementation allows a attacker to cause a service failure.

The vulnerability of the gifprocessraster function in the fromgif.c component of the SIXEL Libsixel encoder/decoder implementation is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability in the dither.c component of the SIXEL Libsixel encoder/decoder implementation allows a attacker to cause a service failure.

The vulnerability of the dither.c component in the SIXEL Libsixel encoder/decoder implementation is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions using a specially created PNG file...

The vulnerability of the sixel_encoder_output_without_macro function in the encoder.c component of the SIXEL Libsixel encoder/decoder implementation allows a hacker to cause a service failure.

The vulnerability of the sixelencoderoutputwithoutmacro function in the encoder.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting a speciall...

The vulnerability of the `sixel_encode_highcolor` function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the sixelencodehighcolor function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c. Remediation There is no fixed version for libsixel. References - GitHub Issue...

编号撤回

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel v1.8.6 contains a security vulnerability that stems from a double release via the component Sixelchunkdestroy in /root/libsixel/src/chunk.c. No detailed...

PT-2022-8948 · Saitoha · Libsixel

Name of the Vulnerable Software and Affected Versions: saitoha libsixel version 1.8.6 Description: A double free issue was discovered in the sixel chunk destroy component at /root/libsixel/src/chunk.c. Recommendations: For saitoha libsixel version 1.8.6, at the moment, there is no information abo...

OESA-2022-1563 xterm security update

It is a terminal emulator for the X Window System. Security Fixes: xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text.CVE-2022-24130...

UBUNTU-CVE-2021-46700

In libsixel 1.8.6, sixelencoderoutputwithoutmacro called from sixelencoderencodeframe in encoder.c has a double free...

Debian: Security Advisory (DLA-2913-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated xterm packages fix security vulnerability

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text. CVE-2022-24130...

MGASA-2022-0051 Updated xterm packages fix security vulnerability

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text. CVE-2022-24130...

xterm through Patch 370 when Sixel support is enabled allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

...

CVE-2022-24130

A buffer-overflow vulnerability was found in xterm's setsixel function in the 'graphicssixel.c' file. This flaw allows an attacker to trigger a buffer overflow via crafted text when the sixel-graphics functionality is enabled. This issue causes xterm to crash, affecting the availability of an...

AZL-8456 CVE-2022-24130 affecting package xterm for versions less than 372-1

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

DEBIAN-CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...