CVE-2019-20205: Integer Overflow
Published Jan 1, 2020
·Updated
libsixel 1.8.4 has an integer overflow in sixelframeresize in frame.c.
Affected Software
2 affected components
Libsixel Project Libsixel=1.8.4
saitoha libsixel=1.8.4
Event History
Jan 1, 2020
CVE Published
via MITRE·10:30 PM
Data Sourced
via MITRE·10:30 PM
Description
Jan 2, 2020
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2019-20205?
CVE-2019-20205 is a vulnerability that exists in libsixel 1.8.4, specifically in the sixel_frame_resize function in frame.c.
2
How severe is CVE-2019-20205?
CVE-2019-20205 has a severity score of 8.8 (high).
3
Is my software affected by CVE-2019-20205?
If you are using libsixel 1.8.4, then your software is affected by CVE-2019-20205.
4
How can I fix CVE-2019-20205?
To fix CVE-2019-20205, you should update libsixel to version 1.8.5 or later.
5
Where can I find more information about CVE-2019-20205?
You can find more information about CVE-2019-20205 at the following link: https://github.com/saitoha/libsixel/issues/127.