PT-2020-15198
CVE-2020-19668
·
Published
2020-11-20
·
Updated
2024-12-20
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libsixel version 1.8.6
Description
The issue arises from unverified indexes into an array, leading to out of bound access in the
gif out code function located in fromgif.c in libsixel. This can potentially cause issues due to the unauthorized access beyond the array's boundaries.Recommendations
For libsixel version 1.8.6, consider restricting access to the
gif out code function in fromgif.c until a patch is available. As a temporary workaround, avoid using the gif out code function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾