PT-2020-15198

CVE-2020-19668

·

Published

2020-11-20

·

Updated

2024-12-20

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libsixel version 1.8.6
Description The issue arises from unverified indexes into an array, leading to out of bound access in the gif out code function located in fromgif.c in libsixel. This can potentially cause issues due to the unauthorized access beyond the array's boundaries.
Recommendations For libsixel version 1.8.6, consider restricting access to the gif out code function in fromgif.c until a patch is available. As a temporary workaround, avoid using the gif out code function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2023-1540
ALT-PU-2023-1591
ALT-PU-2024-17256
Found an issue in the description? Have something to add? Feel free to write us 👾