Known Vulnerabilities for products from Libsixel Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Libsixel Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-41715 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-04-08 | 2022-04-14 |
| CVE-2021-40656 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-04-08 | 2022-04-14 |
| CVE-2020-36123 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-03-10 | 2022-03-12 |
| CVE-2020-36120 | Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Service... | 7.5 - HIGH | 2021-04-14 | 2021-04-16 |
| CVE-2020-21677 | A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attacke... | 6.5 - MEDIUM | 2021-08-10 | 2021-08-17 |
| CVE-2020-21548 | Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c. | 8.8 - HIGH | 2021-09-17 | 2021-09-29 |
| CVE-2020-21547 | Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c. | 8.8 - HIGH | 2021-09-17 | 2021-09-29 |
| CVE-2020-21050 | Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c. | 6.5 - MEDIUM | 2021-09-14 | 2022-09-20 |
| CVE-2020-21049 | An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) ... | 6.5 - MEDIUM | 2021-09-14 | 2021-09-24 |
| CVE-2020-21048 | An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a craf... | 6.5 - MEDIUM | 2021-09-14 | 2021-09-24 |
| CVE-2020-19668 | Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6. | 6.5 - MEDIUM | 2020-11-20 | 2021-07-21 |
| CVE-2020-11721 | load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which c... | 6.5 - MEDIUM | 2020-04-12 | 2020-04-13 |
| CVE-2019-20205 | libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c. | 8.8 - HIGH | 2020-01-02 | 2020-01-06 |
| CVE-2019-20140 | An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_out_code at fromgif.c. | 8.8 - HIGH | 2019-12-30 | 2020-01-07 |
| CVE-2019-20094 | An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_init_frame at fromgif.c. | 8.8 - HIGH | 2019-12-30 | 2020-01-03 |
| CVE-2019-20024 | A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4. | 6.5 - MEDIUM | 2019-12-27 | 2020-01-02 |
| CVE-2019-20023 | A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4. | 6.5 - MEDIUM | 2019-12-27 | 2021-07-21 |
| CVE-2019-20022 | An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3. | 6.5 - MEDIUM | 2019-12-27 | 2020-01-02 |
| CVE-2019-19778 | An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c. | 8.8 - HIGH | 2019-12-13 | 2019-12-19 |
| CVE-2019-19777 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stb... | 8.8 - HIGH | 2019-12-13 | 2019-12-18 |
Known software with vulnerabilities from Libsixel Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Libsixel Project | Libsixel | 0.11.0 |