libsixel buffer overflow vulnerability (CNVD-2020-12707)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'loadsixel' function of the loader.c file in libsixel version 1.8.2, which originates when a networked system or product perform...

PT-2019-15953 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer over-read issue was discovered in the load sixel function at loader.c. Recommendations: For libsixel version 1.8.2, at the moment, there is no information about a newer version that...