CVE-2020-21048

Name of the Vulnerable Software and Affected Versions libsixel versions prior to 1.8.4

Description The issue in the dither.c component of libsixel allows attackers to cause a denial of service via a crafted PNG file. This is related to errors in resource release. Exploitation of the issue enables a remote attacker to cause a denial of service using a specially crafted PNG file.

Recommendations For versions prior to 1.8.4, update to version 1.8.4 or later to resolve the issue. As a temporary workaround, consider restricting the processing of PNG files from untrusted sources until the update is applied.