Lucene search
+L

750 matches found

CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•16 views

libsixel 输入验证错误漏洞

Libsixel is a software package developed by Hayaki Saito, which provides encoding/decoding implementations for DEC SIXEL graphics and other conversion programs. Versions of Libsixel 1.8.7 and earlier contained a vulnerability related to input validation errors. This vulnerability stemmed from...

7.1CVSS5.8AI score0.00206EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•20 views

libsixel 资源管理错误漏洞

Libsixel is a software package developed by Hayaki Saito, which provides encoding/decoding implementations for DEC SIXEL graphics and other conversion programs. Versions of Libsixel 1.8.7 and earlier contained a resource management vulnerability. This vulnerability stemmed from the loadgif...

7CVSS6.2AI score0.00193EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•12 views

PT-2026-32952

Name of the Vulnerable Software and Affected Versions libsixel versions prior to 1.8.7-r1 Description A use-after-free issue exists in the load with gdkpixbuf function within loader.c when the software is built with the --with-gdk-pixbuf2 option. The problem occurs because the cleanup path manual...

7.8CVSS5.8AI score0.00253EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-33018: Use After Free

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a Use-After-Free vulnerability via the loadgif function in fromgif.c, where a single sixelframet object is reused across all frames of an animated GIF and gifinitframe unconditionally...

7CVSS6.3AI score0.00193EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-33021: Use After Free

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixelencoderencodebytes because sixelframeinit stores the caller-owned pixel buffer pointer directly in frame-pixels without making a defensive copy...

7.3CVSS6.4AI score0.00211EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-33023: Use After Free

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. In versions 1.8.7 and prior, when built with the --with-gdk-pixbuf2 option, a use-after-free vulnerability exists in loadwithgdkpixbuf in loader.c. The cleanup path manually frees the sixelframet object and its interna...

7.8CVSS6.2AI score0.00253EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•22 views

libsixel 资源管理错误漏洞

Libsixel is a software package developed by Hayaki Saito, which provides encoding/decoding implementations for DEC SIXEL graphics and other conversion programs. Versions of Libsixel 1.8.7 and earlier contained a resource management vulnerability. This vulnerability stemmed from a problem in the...

7.3CVSS5.9AI score0.00211EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-33019: Out-of-bounds Read

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow leading to an out-of-bounds heap read in the --crop option handling of img2sixel, where positive coordinates up to INTMAX are accepted without overflow-safe bounds...

7.1CVSS5.9AI score0.00206EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•14 views

PT-2026-32926

Name of the Vulnerable Software and Affected Versions libsixel versions prior to 1.8.7-r1 Description An integer overflow exists in the handling of the '--crop' option in img2sixel. When positive coordinates up to INT MAX are provided, the sixel encoder do clip function fails to perform...

7.1CVSS5.9AI score0.00206EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•20 views

libsixel 资源管理错误漏洞

Libsixel is a software package developed by Hayaki Saito, which provides encoding/decoding implementations for DEC SIXEL graphics and other conversion programs. Versions of Libsixel 1.8.7 and earlier contained a resource management vulnerability. This vulnerability stemmed from the...

7.8CVSS6.2AI score0.00253EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•20 views

PT-2026-32927

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a heap buffer overflow via sixel frame convert to rgb888 in frame.c, where allocation size and pointer offset computations for palettised images PAL1,...

7.1CVSS6.3AI score0.00224EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•21 views

libsixel 输入验证错误漏洞

Libsixel is a software package developed by Hayaki Saito, which provides encoding/decoding implementations for DEC SIXEL graphics and other conversion programs. Versions of Libsixel 1.8.7 and earlier contained a vulnerability related to input validation errors. This vulnerability stemmed from an...

7.1CVSS6.3AI score0.00224EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/03/07 12:00 a.m.•10 views

Fedora 44 : libsixel (2026-a800d3417b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a800d3417b advisory. Apply fix for CVE-2025-61146 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

4CVSS5.8AI score0.00122EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/03/06 1:27 a.m.•21 views

[SECURITY] Fedora 42 Update: libsixel-1.10.5-5.fc42

An encoder/decoder implementation for DEC SIXEL graphics...

4CVSS5.9AI score0.00122EPSS
SaveExploits0
Fedora
Fedora
•added 2026/03/06 1:09 a.m.•18 views

[SECURITY] Fedora 43 Update: libsixel-1.10.5-5.fc43

An encoder/decoder implementation for DEC SIXEL graphics...

4CVSS5.9AI score0.00122EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•9 views

Fedora 43 : libsixel (2026-b227fad171)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b227fad171 advisory. Apply fix for CVE-2025-61146 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

4CVSS5.8AI score0.00122EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•7 views

Fedora 42 : libsixel (2026-57cd5704e9)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-57cd5704e9 advisory. Apply fix for CVE-2025-61146 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

4CVSS5.8AI score0.00122EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2026/03/06 12:00 a.m.•6 views

Fedora: Security Advisory (FEDORA-2026-b227fad171)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS5.8AI score0.00122EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2026/03/06 12:00 a.m.•6 views

Fedora: Security Advisory (FEDORA-2026-57cd5704e9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS5.8AI score0.00122EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/02 12:26 a.m.•11 views

SUSE CVE-2025-61146

saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component mallocstub.c...

4CVSS5.7AI score0.00122EPSS
SaveExploits0References3
Rows per page
Query Builder