CVE-2026-111144: libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilovexbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL highfontdataxbin pointer and terminate the process.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications using libansilove versions 1.3.0 through 1.4.2 are exposed when they process attacker-supplied XBIN files.
What must an attacker provide to trigger the crash?
The attacker must supply a crafted XBIN file that sets the 512-character flag but does not set the custom-font flag. This causes ansilove_xbin() to reach drawchar() with a NULL high_font_data_xbin pointer.
What is the impact of successful exploitation?
Successful exploitation terminates the affected application, resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.