Vulnerabilities (CVE)

Filtered by vendor Libsixel Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-21050 1 Libsixel Project 1 Libsixel 2022-07-10 4.3 MEDIUM 6.5 MEDIUM
Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.
CVE-2022-29978 1 Libsixel Project 1 Libsixel 2022-05-19 4.3 MEDIUM 6.5 MEDIUM
There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
CVE-2022-29977 1 Libsixel Project 1 Libsixel 2022-05-19 4.3 MEDIUM 6.5 MEDIUM
There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
CVE-2021-45340 1 Libsixel Project 1 Libsixel 2022-01-28 4.3 MEDIUM 6.5 MEDIUM
In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.
CVE-2020-21049 1 Libsixel Project 1 Libsixel 2021-09-24 4.3 MEDIUM 6.5 MEDIUM
An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file.
CVE-2020-21048 1 Libsixel Project 1 Libsixel 2021-09-24 4.3 MEDIUM 6.5 MEDIUM
An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a crafted PNG file.
CVE-2020-21677 1 Libsixel Project 1 Libsixel 2021-08-17 4.3 MEDIUM 6.5 MEDIUM
A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
CVE-2020-19668 1 Libsixel Project 1 Libsixel 2021-07-21 4.3 MEDIUM 6.5 MEDIUM
Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.
CVE-2019-20023 1 Libsixel Project 1 Libsixel 2021-07-21 4.3 MEDIUM 6.5 MEDIUM
A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.
CVE-2019-3573 1 Libsixel Project 1 Libsixel 2020-08-24 4.3 MEDIUM 5.5 MEDIUM
In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.
CVE-2019-11024 1 Libsixel Project 1 Libsixel 2020-08-24 4.3 MEDIUM 5.5 MEDIUM
The load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.
CVE-2020-11721 1 Libsixel Project 1 Libsixel 2020-04-13 4.3 MEDIUM 6.5 MEDIUM
load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.
CVE-2019-20022 1 Libsixel Project 1 Libsixel 2020-01-02 4.3 MEDIUM 6.5 MEDIUM
An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.
CVE-2019-20024 1 Libsixel Project 1 Libsixel 2020-01-02 4.3 MEDIUM 6.5 MEDIUM
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
CVE-2018-19757 1 Libsixel Project 1 Libsixel 2018-12-26 4.3 MEDIUM 6.5 MEDIUM
There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that will cause a denial of service.
CVE-2018-19763 1 Libsixel Project 1 Libsixel 2018-12-26 4.3 MEDIUM 5.5 MEDIUM
There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service.
CVE-2018-19761 1 Libsixel Project 1 Libsixel 2018-12-26 4.3 MEDIUM 5.5 MEDIUM
There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.
CVE-2018-19759 1 Libsixel Project 1 Libsixel 2018-12-26 4.3 MEDIUM 5.5 MEDIUM
There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service.
CVE-2018-19756 1 Libsixel Project 1 Libsixel 2018-12-26 4.3 MEDIUM 5.5 MEDIUM
There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service.