CVE-2025-9300

Name of the Vulnerable Software and Affected Versions: libsixel versions up to 1.10.3

Description: A vulnerability exists in saitoha libsixel up to version 1.10.3. This issue affects the sixel debug print palette function within the img2sixel component, located in the src/encoder.c file. Manipulation of this function can lead to a stack-based buffer overflow. The attack requires local access. The exploit for this issue has been publicly released.

Recommendations: libsixel versions prior to 1.10.3: Apply patch 316c086e79d66b62c0c4bc66229ee894e4fdb7d1 to resolve this issue.