cbcvebase.
CVE-2018-19761
published 2018-11-30

CVE-2018-19761: There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.

medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianlibsixel< libsixel 1.8.2-2 (bookworm)libsixel 1.8.2-2 (bookworm)
libsixel_projectlibsixel>= 0 < 1.8.2-21.8.2-2
libsixel_projectlibsixel>= 0 < 1.8.2-21.8.2-2
libsixel_projectlibsixel>= 0 < 1.8.2-21.8.2-2
libsixel_projectlibsixel>= 0 < 1.8.2-21.8.2-2
saitohalibsixel

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM