PT-2020-15198
CVE-2020-19668
·
تاريخ النشر
2020-11-20
·
تاريخ التحديث
2024-12-20
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libsixel version 1.8.6
Description
The issue arises from unverified indexes into an array, leading to out of bound access in the
gif out code function located in fromgif.c in libsixel. This can potentially cause issues due to the unauthorized access beyond the array's boundaries.Recommendations
For libsixel version 1.8.6, consider restricting access to the
gif out code function in fromgif.c until a patch is available. As a temporary workaround, avoid using the gif out code function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾