Saitoha Libsixel vulnerabilities

CVE-2026-33021 [HIGH] CWE-416 CVE-2026-33021: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and pr libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixel_encoder_encode_bytes() because sixel_frame_init() stores the caller-owned pixel buffer pointer directly in frame->pixels without making a defensive copy. When a resize operation is triggered, sixel_fra

CVE-2026-33018 [HIGH] CWE-416 CVE-2026-33018: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and pr libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a Use-After-Free vulnerability via the load_gif() function in fromgif.c, where a single sixel_frame_t object is reused across all frames of an animated GIF and gif_init_frame() unconditionally frees and reallocates frame->pixels between fram

CVE-2026-33020 [HIGH] CWE-122 CVE-2026-33020: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and pr libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a heap buffer overflow via sixel_frame_convert_to_rgb888() in frame.c, where allocation size and pointer offset computations for palettised images (PAL1, PAL2, PAL4) are performed using int arithmetic befor

CVE-2026-33023 [HIGH] CWE-416 CVE-2026-33023: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. In versions 1.8.7 and libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. In versions 1.8.7 and prior, when built with the --with-gdk-pixbuf2 option, a use-after-free vulnerability exists in load_with_gdkpixbuf() in loader.c. The cleanup path manually frees the sixel_frame_t object and its internal buffers without consulting the reference count,

CVE-2026-33019 [HIGH] CWE-125 CVE-2026-33019: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and pr libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow leading to an out-of-bounds heap read in the --crop option handling of img2sixel, where positive coordinates up to INT_MAX are accepted without overflow-safe bounds checking. In sixel_encoder_do_clip(), the expression cli

CVE-2025-9300 [MEDIUM] CWE-119 CVE-2025-9300: A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function s A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.c of the component img2sixel. The manipulation results in stack-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is