cbcvebase.

Libsixel Project Libsixel vulnerabilities

40 known vulnerabilities affecting libsixel_project/libsixel.

Total CVEs
40
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH15MEDIUM21

Vulnerabilities

Page 2 of 2
CVE-2018-14072P4HIGHCVSS 7.5≥ 0, < 1.8.2-12018-07-15
CVE-2018-14072 [HIGH] CVE-2018-14072: libsixel 1 libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.
osv
CVE-2020-19668P4MEDIUMCVSS 6.5≥ 0, < 1.10.3-12020-11-20
CVE-2020-19668 [MEDIUM] CVE-2020-19668: Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.
osv
CVE-2019-20024P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12019-12-27
CVE-2019-20024 [MEDIUM] CVE-2019-20024: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
osv
CVE-2020-21677P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12021-08-10
CVE-2020-21677 [MEDIUM] CVE-2020-21677: A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
osv
CVE-2020-21049P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12021-09-14
CVE-2020-21049 [MEDIUM] CVE-2020-21049: An invalid read in the stb_image An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file.
osv
CVE-2020-21048P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12021-09-14
CVE-2020-21048 [MEDIUM] CVE-2020-21048: An issue in the dither An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a crafted PNG file.
osv
CVE-2022-29977P4MEDIUMCVSS 6.5≥ 0, < 1:1.8.7-12022-05-11
CVE-2022-29977 [MEDIUM] CVE-2022-29977: There is an assertion failure error in stbi__jpeg_huff_decode, stb_image There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
osv
CVE-2019-20056P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12019-12-29
CVE-2019-20056 [MEDIUM] CVE-2019-20056: stb_image stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.
osv
CVE-2022-29978P4MEDIUMCVSS 6.5≥ 0, < 1:1.8.7-12022-05-11
CVE-2022-29978 [MEDIUM] CVE-2022-29978: There is a floating point exception error in sixel_encoder_do_resize, encoder There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
osv
CVE-2020-11721P4MEDIUMCVSS 6.5≥ 0, < 1.10.3-12020-04-12
CVE-2020-11721 [MEDIUM] CVE-2020-11721: load_png in loader load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.
osv
CVE-2019-20022P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12019-12-27
CVE-2019-20022 [MEDIUM] CVE-2019-20022: An invalid memory address dereference was discovered in load_pnm in frompnm An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.
osv
CVE-2021-45340P4MEDIUMCVSS 6.5≥ 0, < 1.10.5-12022-01-25
CVE-2021-45340 [MEDIUM] CVE-2021-45340: In Libsixel prior to and including v1 In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.
osv
CVE-2018-19757P4MEDIUMCVSS 6.5≥ 0, < 1.8.2-22018-11-30
CVE-2018-19757 [MEDIUM] CVE-2018-19757: There is a NULL pointer dereference at function sixel_helper_set_additional_message (status There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that will cause a denial of service.
osv
CVE-2019-20023P4MEDIUMCVSS 6.5≥ 0, < 1.8.6-12019-12-27
CVE-2019-20023 [MEDIUM] CVE-2019-20023: A memory leak was discovered in image_buffer_resize in fromsixel A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.
osv
CVE-2018-19763P4MEDIUMCVSS 5.5≥ 0, < 1.8.2-22018-11-30
CVE-2018-19763 [MEDIUM] CVE-2018-19763: There is a heap-based buffer over-read at writer There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service.
osv
CVE-2018-19759P4MEDIUMCVSS 5.5≥ 0, < 1.8.2-22018-11-30
CVE-2018-19759 [MEDIUM] CVE-2018-19759: There is a heap-based buffer over-read at stb_image_write There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service.
osv
CVE-2018-19756P4MEDIUMCVSS 5.5≥ 0, < 1.8.2-22018-11-30
CVE-2018-19756 [MEDIUM] CVE-2018-19756: There is a heap-based buffer over-read at stb_image There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service.
osv
CVE-2019-3573P4MEDIUMCVSS 5.5≥ 0, < 1.8.2-22019-01-02
CVE-2019-3573 [MEDIUM] CVE-2019-3573: In libsixel v1 In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.
osv
CVE-2018-19761P4MEDIUMCVSS 5.5≥ 0, < 1.8.2-22018-11-30
CVE-2018-19761 [MEDIUM] CVE-2018-19761: There is an illegal address access at fromsixel There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.
osv
CVE-2019-11024P4MEDIUMCVSS 5.5≥ 0, < 1.8.6-12019-04-08
CVE-2019-11024 [MEDIUM] CVE-2019-11024: The load_pnm function in frompnm The load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.
osv
← Previous2 / 2
Libsixel Project Libsixel vulnerabilities | cvebase