CVE-2025-9300mediumCWE-119CWE-121

CVE-2025-9300: falha de média gravidade em saitoha libsixel

saitoha libsixel img2sixel encoder.c sixel_debug_print_palette stack-based overflow

Publicada em

Seguir esta CVE+ Monitorar libsixel+ Monitorar libsixel

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.3%
A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.c of the component img2sixel. The manipulation results in stack-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is identified as 316c086e79d66b62c0c4bc66229ee894e4fdb7d1. Applying a patch is advised to resolve this issue.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
saitoha · libsixel
CVEs relacionadas — saitoha libsixel

No mesmo produto, das mais perigosas para as menos.

CVE-2026-33023HIGHlibsixel: Use-after-free in load_with_gdkpixbuf()EPSS 0.3%CVE-2026-33019HIGHlibsixel: Integer overflow leads to Out-of-bounds Read in img2sixelEPSS 0.3%CVE-2026-33021HIGHlibsixel: Use-after-free in sixel_encoder_encode_bytes()EPSS 0.2%CVE-2026-110601MEDIUMlibsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 Heap Out-of-Bounds Write via GIFEPSS 0.2%CVE-2026-33020HIGHlibsixel: Integer Overflow in write_png_to_file() leads to Heap-based Buffer OverflowEPSS 0.2%CVE-2026-33018HIGHlibsixel: Use-After-Free in load_gif()EPSS 0.2%