CVE-2020-11721: Medium severity Libsixel Project Libsixel vulnerability
Published Apr 12, 2020
·Updated
loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.
Affected Software
2 affected components
Libsixel Project Libsixel=1.8.6
saitoha libsixel=1.8.6
Event History
Apr 12, 2020
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-11721?
CVE-2020-11721 is a vulnerability in libsixel 1.8.6 that can cause a denial of service.
2
How severe is CVE-2020-11721?
CVE-2020-11721 has a severity score of 6.5, which is considered medium.
3
What is the affected software of CVE-2020-11721?
The affected software of CVE-2020-11721 is libsixel 1.8.6 by Libsixel Project.
4
How can CVE-2020-11721 be exploited?
CVE-2020-11721 can be exploited by triggering an uninitialized pointer in the load_png function of libsixel.
5
Is there a fix for CVE-2020-11721?
At the moment, there is no specific fix mentioned for CVE-2020-11721. It is recommended to update to the latest version of libsixel once a fix is available.