First published: Fri Apr 08 2022(Updated: )
libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Libsixel Project Libsixel | <1.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-40656 is a vulnerability in libsixel before version 1.10 that allows for a buffer overflow in the libsixel/src/quant.c file at line 867.
CVE-2021-40656 has a severity rating of 8.8 (high).
CVE-2021-40656 affects all versions of the libsixel software up to but not including version 1.10.
To fix the CVE-2021-40656 vulnerability, it is recommended to update the libsixel software to version 1.10 or later.
More information about CVE-2021-40656 can be found at the following reference: https://github.com/libsixel/libsixel/issues/25