Where
AND
-Infinity
0
Severity
6.5
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

There is a NULL pointer dereference at function sixelhelpersetadditionalmessage (status.c) in libsixel 1.8.2 that will cause a denial of service.

First published (updated )
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

There is an illegal address access at fromsixel.c (function: sixeldecoderawimpl) in libsixel 1.8.2 that will cause a denial of service.

First published (updated )
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c.

First published (updated )
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

stbimage.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain.

First published (updated )
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function sixeldecoderawimpl at fromsixel.c.

First published (updated )
Severity
9.8
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixeldecoderawimpl at fromsixel.c.

First published (updated )
Severity
9.8
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixelencodebody at tosixel.c.

First published (updated )
Severity
9.8
Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function loadpnm at frompnm.c, due to an integer overflow.

First published (updated )
Severity
8.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c.

First published (updated )
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.

First published (updated )
Severity
7.8
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg() in the file loader.c, as demonstrated by img2sixel.

First published (updated )
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl() in the file fromsixel.c, as demonstrated by sixel2png.

First published (updated )
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

There is a heap-based buffer over-read at stbimagewrite.h (function: stbiwritepngtomem) in libsixel 1.8.2 that will cause a denial of service.

First published (updated )
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

There is a heap-based buffer over-read at stbimage.h (function: stbitgaload) in libsixel 1.8.2 that will cause a denial of service.

First published (updated )
Severity
7.8
Buffer Overflow
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

There is a heap-based buffer overflow at fromsixel.c (function: imagebufferresize) in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact.

First published (updated )
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

There is a heap-based buffer over-read at writer.c (function: writepngtofile) in libsixel 1.8.2 that will cause a denial of service.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203