libsixel buffer overflow vulnerability (CNVD-2022-31763)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in versions of libsixel prior to 1.10, which stems from a buffer overflow in libsixel/src/quant.c:867. A remote attacker could exploit...