699 matches found
CVE-2020-19668
CVE-2020-19668 affects libsixel 1.8.6, caused by unverified array indexing in gif_out_code() of fromgif.c, leading to out-of-bounds access. Several sources document this vulnerability and provide fixes: ALT Linux notes security fixes for libsixel 1.10.3-alt1; PT-Security PT-2022-11292 recommends ...
PT-2020-15198 · Sixel +2 · Libsixel +2
Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.6 Description: The issue arises from unverified indexes into an array, leading to out of bound access in the gif out code function located in fromgif.c in libsixel. This can potentially cause issues due to the unauthorize...
libsixel 缓冲区错误漏洞
libsixel is a SIXEL encoder/decoder implementation. libsixel 1.8.6 is vulnerable to an unvalidated array indexing vulnerability. An attacker could exploit this vulnerability to cause out-of-bounds access to the gifoutcode function in fromgif.c...
PT-2021-6714 · Libsixel +1 · Libsixel +1
Name of the Vulnerable Software and Affected Versions: Libsixel versions prior to 1.8.3 Description: The issue is related to a stack buffer overflow in the gif process raster function at fromgif.c, which can be exploited by a remote attacker to cause a denial of service. Recommendations: For...
PT-2021-6712 · Libsixel +1 · Libsixel +1
Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.8.4 Description: The issue in the dither.c component of libsixel allows attackers to cause a denial of service via a crafted PNG file. This is related to errors in resource release. Exploitation of the issue enabl...
PT-2021-6494 · Libsixel +1 · Libsixel +1
Name of the Vulnerable Software and Affected Versions: Libsixel version 1.8.2 Description: The issue is related to a heap-based buffer overflow in the dither func fs function in tosixel.c. This can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause...
libsixel buffer overflow vulnerability (CNVD-2020-22975)
libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A security vulnerability exists in the 'loadpng' function of the libsixel.a library in libsixel version 1.8.6. An attacker can exploit this vulnerability to cause a denial of...
CVE-2020-11721
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
CVE-2020-11721
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
DEBIAN-CVE-2020-11721
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
Design/Logic Flaw
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
CVE-2020-11721
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
UBUNTU-CVE-2020-11721
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
CVE-2020-11721
CVE-2020-11721 affects libsixel 1.8.6. The issue is a load_png path in loader.c that uses an uninitialized pointer, leading to an invalid free and potential denial of service. PTSecurity advisories indicate updates to 1.8.4+ to fix related heap/array processing issues; ALT Linux notes a 1.10.3-al...
CVE-2020-11721
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...
PT-2020-12807 · Sixel +2 · Libsixel +2
Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.6 Description: The issue is related to an uninitialized pointer in the load png function in loader.c in libsixel.a of libsixel, leading to an invalid call to free, which can cause a denial of service. Recommendations: For...
CVE-2019-20205
libsixel 1.8.4 has an integer overflow in sixelframeresize in frame.c...
CVE-2019-20205
libsixel 1.8.4 has an integer overflow in sixelframeresize in frame.c...