libsixel buffer overflow vulnerability (CNVD-2022-31764)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in libsixel version 1.8.6, which stems from a buffer overflow in libsixel/src/quant.c:876. An attacker can remotely execute arbitrary...