CVE-2021-3410

Name of the Vulnerable Software and Affected Versions libcaca version 0.99.beta19

Description A flaw was found in the caca resize function in libcaca/caca/canvas.c, which is related to a buffer overflow issue. This may lead to local execution of arbitrary code in the user context. The issue can allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For libcaca version 0.99.beta19, as a temporary workaround, consider disabling the caca resize function until a patch is available. Restrict access to the vulnerable canvas.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.