See how libsixel project compares to other vendors in security performance
An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function sixeldecoderawimpl at fromsixel.c.
An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixeldecoderawimpl at fromsixel.c.
An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixelencodebody at tosixel.c.
An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function loadpnm at frompnm.c, due to an integer overflow.
libsixel 1.8.4 has an integer overflow in sixelframeresize in frame.c.
An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gifoutcode at fromgif.c.
An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gifinitframe at fromgif.c.
An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c.
stbimage.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain.
Libsixel 1.8.3 contains a heap-based buffer overflow in the sixelencodehighcolor function in tosixel.c.
Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.
libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388.
libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.
libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg() in the file loader.c, as demonstrated by img2sixel.
There is a heap-based buffer overflow at fromsixel.c (function: imagebufferresize) in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact.
libsixel 1.8.1 has a memory leak in sixeldecoderdecode in decoder.c, imagebufferresize in fromsixel.c, and sixeldecoderaw in fromsixel.c.
libsixel 1.8.1 has a memory leak in sixelallocatornew in allocator.c.
Buffer Overflow in the "sixelencoderencodebytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Service (DoS).
An invalid memory address dereference was discovered in loadpnm in frompnm.c in libsixel before 1.8.3.
A memory leak was discovered in imagebufferresize in fromsixel.c in libsixel 1.8.4.
A heap-based buffer overflow was discovered in imagebufferresize in fromsixel.c in libsixel before 1.8.4.
An invalid read in the stbimage.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file.
Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gifprocessraster at fromgif.c.
An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a crafted PNG file.
A heap-based buffer overflow in the sixelencoderoutputwithoutmacro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
There is a NULL pointer dereference at function sixelhelpersetadditionalmessage (status.c) in libsixel 1.8.2 that will cause a denial of service.
In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.