CVE-2018-20548

Name of the Vulnerable Software and Affected Versions: libcaca version 0.99.beta19

Description: The issue is related to an integer overflow in the load image function of the libcaca graphics library. This can potentially allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability. The problem is also associated with an illegal WRITE memory access at common-image.c in the load image function for 1bpp data.

Recommendations: For libcaca version 0.99.beta19, consider restricting access to the load image function until a patch is available. As a temporary workaround, avoid using the load image function for 1bpp data to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.