PT-2019-16621

CVE-2019-3573

Publicado

2019-01-02

Atualizado

2024-12-20

Descrição por

CVSS 3.1

5.5

Média

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libsixel version 1.8.2

Description The issue is related to an infinite loop in the sixel decode raw impl() function, located in the fromsixel.c file. This has been demonstrated using sixel2png.

Recommendations For libsixel version 1.8.2, consider avoiding the use of the sixel decode raw impl() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

Cool-Tomato

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')

Identificadores relacionados

CVE-2019-3573

ALT-PU-2020-2902