PT-2019-6183
CVE-2020-21548
·
Published
2019-12-16
·
Updated
2021-09-29
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Libsixel version 1.8.3
Description
The issue is related to a heap-based buffer overflow in the
sixel encode highcolor function in tosixel.c. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.Recommendations
For Libsixel version 1.8.3, consider disabling the
sixel encode highcolor function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾