cbcvebase.
CVE-2019-20023
published 2019-12-27

CVE-2019-20023: A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianlibsixel< libsixel 1.8.6-1 (bookworm)libsixel 1.8.6-1 (bookworm)
libsixel_projectlibsixel>= 0 < 1.8.6-11.8.6-1
libsixel_projectlibsixel>= 0 < 1.8.6-11.8.6-1
libsixel_projectlibsixel>= 0 < 1.8.6-11.8.6-1
libsixel_projectlibsixel>= 0 < 1.8.6-11.8.6-1
saitohalibsixel< 1.8.41.8.4

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv9.8CRITICAL