Lucene search
+L

750 matches found

CVE
CVE
•added 2022/04/08 2:51 p.m.•96 views

CVE-2022-27046

CVE-2022-27046 affects libsixel 1.8.6. The issue is a Heap Use After Free vulnerability in libsixel/src/dither.c:388, as documented by multiple sources (NVD, RH, Debian OSV entries). Impact is described in CVSS as MEDIUM to HIGH depending on vector: network access with partial confidentiality, in...

8.8CVSS8.6AI score0.01019EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/08 12:00 a.m.•3 views

CVE-2021-41715: Use After Free

libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379...

8.8CVSS8.2AI score0.01023EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/08 12:00 a.m.•15 views

libsixel 资源管理错误漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.10.0, which stems from the presence of post-release reuse in libsixel/src/dither.c:379. An attacker cou...

8.8CVSS5.7AI score0.01023EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/08 12:00 a.m.•15 views

libsixel 缓冲区错误漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in libsixel version 1.8.6, which stems from a buffer overflow in libsixel/src/quant.c:876. An attacker can remotely execute arbitrary...

8.8CVSS6.5AI score0.01019EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/04/08 12:00 a.m.•5 views

PT-2022-11292 · Libsixel +2 · Libsixel +2

Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.10 Description: The issue is related to a Buffer Overflow in the libsixel/src/quant.c file at line 867. This is a general information about the problem, and no specific details about the number of potentially...

9.8CVSS5.8AI score0.01551EPSS
SaveExploits21References63
CNNVD
CNNVD
•added 2022/04/08 12:00 a.m.•10 views

libsixel 缓冲区错误漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in versions of libsixel prior to 1.10, which stems from a buffer overflow in libsixel/src/quant.c:867. A remote attacker could exploit...

8.8CVSS6.5AI score0.01019EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/08 12:00 a.m.•2 views

CVE-2022-27046: Use After Free

libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388...

8.8CVSS7.8AI score0.01019EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/08 12:00 a.m.•2 views

CVE-2022-27044: Out-of-bounds Write

libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876...

8.8CVSS7.8AI score0.01019EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/08 12:00 a.m.•14 views

libsixel资源管理错误漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.8.6, which stems from the presence of heap-based post-release reuse in libsixel/src/dither.c:388. An...

8.8CVSS5.7AI score0.01019EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/08 12:00 a.m.•2 views

CVE-2021-40656: Out-of-bounds Write

libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867...

8.8CVSS7.4AI score0.01019EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•13 views

The vulnerability of the dither_func_fs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ditherfuncfs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

10CVSS7.4AI score0.01064EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•31 views

The vulnerability of the stb_image.h component in the SIXEL Libsixel encoder/decoder implementation allows a malicious actor to cause a service failure.

The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder implementation is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created PSD file...

7.1CVSS6.8AI score0.01382EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2022/03/26 1:15 p.m.•10 views

DEBIAN-CVE-2022-27938

stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw...

5.5CVSS5.7AI score0.00614EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/26 1:15 p.m.•31 views

UBUNTU-CVE-2022-27938

stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw...

5.5CVSS6.1AI score0.00614EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/26 1:15 p.m.•24 views

Authentication flaw

stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw...

4.3CVSS5.5AI score0.00614EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2022/03/26 1:15 p.m.•30 views

CVE-2022-27938

stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw...

5.5CVSS6.1AI score0.00614EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/26 12:49 p.m.•114 views

CVE-2022-27938

CVE-2022-27938 affects stb_image.h version 2.19 (used by libsixel and other products). The issue is a reachable assertion in stbi__create_png_image_raw. Documented impact indicates a local impact with a high availability impact per CVSS 3.1 (vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) a...

5.5CVSS5.4AI score0.00614EPSS
SaveExploits1References1Affected Software2
Debian CVE
Debian CVE
•added 2022/03/26 12:49 p.m.•102 views

CVE-2022-27938

stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw...

5.5CVSS5.4AI score0.00614EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/03/26 12:49 p.m.•33 views

CVE-2022-27938

stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw...

5.7AI score0.00614EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/03/14 4:36 a.m.•17 views

Denial Of Service (DoS)

libsixel is vulnerable to denial of service. The vulnerability exists due to a double free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c...

3.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder