CVE-2018-14072: High severity Libsixel Project Libsixel vulnerability

Published Jul 15, 2018
·
Updated

libsixel 1.8.1 has a memory leak in sixeldecoderdecode in decoder.c, imagebufferresize in fromsixel.c, and sixeldecoderaw in fromsixel.c.

Affected Software

2 affected components
Libsixel Project Libsixel=1.8.1
saitoha libsixel=1.8.1

Event History

Jul 15, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2018-14072?

The severity of CVE-2018-14072 is high with a severity value of 7.5.

2

What software is affected by CVE-2018-14072?

Libsixel Project Libsixel version 1.8.1 is affected by CVE-2018-14072.

3

What is the memory leak vulnerability in CVE-2018-14072?

The memory leak vulnerability in CVE-2018-14072 is present in the functions sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.

4

Is there a fix available for CVE-2018-14072?

Yes, there is a fix available for CVE-2018-14072. Please refer to the provided reference link for more information.

5

Can you provide more details about CVE-2018-14072?

CVE-2018-14072 is a memory leak vulnerability in the Libsixel Project Libsixel version 1.8.1, specifically in the functions sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c. It has a severity of high with a severity value of 7.5. Refer to the provided reference link for more details.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203