CVE-2026-110601mediumCWE-787

CVE-2026-110601: falha de média gravidade em saitoha libsixel

libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 Heap Out-of-Bounds Write via GIF

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar libsixel+ Monitorar libsixel

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.8epss 0.2%
libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent color index against the palette size. Attackers can supply a crafted GIF with a small color table and large transparent index, processed with a background color set, to write bytes past the palette buffer, causing heap corruption or crashes.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
saitoha · libsixel
CVEs relacionadas — saitoha libsixel

No mesmo produto, das mais perigosas para as menos.

CVE-2026-33023HIGHlibsixel: Use-after-free in load_with_gdkpixbuf()EPSS 0.3%CVE-2026-33019HIGHlibsixel: Integer overflow leads to Out-of-bounds Read in img2sixelEPSS 0.3%CVE-2025-9300MEDIUMsaitoha libsixel img2sixel encoder.c sixel_debug_print_palette stack-based overflowEPSS 0.3%CVE-2026-33021HIGHlibsixel: Use-after-free in sixel_encoder_encode_bytes()EPSS 0.2%CVE-2026-33020HIGHlibsixel: Integer Overflow in write_png_to_file() leads to Heap-based Buffer OverflowEPSS 0.2%CVE-2026-33018HIGHlibsixel: Use-After-Free in load_gif()EPSS 0.2%