Vulnerability CVE-2020-19668: Information

Description

Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-19668
Published: Nov. 20, 2020
Modified: July 21, 2021
Error type identifier: CWE-125

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
libsixelsisyphus1.10.3-alt11.10.3-alt2ALT-PU-2023-1540-1317765Fixed
libsixelsisyphus_e2k1.10.3-alt11.10.3-alt2ALT-PU-2023-3069-1-Fixed
libsixelp101.10.3-alt11.10.3-alt1ALT-PU-2023-1591-1317774Fixed
libsixelp10_e2k1.10.3-alt11.10.3-alt1ALT-PU-2023-3154-1-Fixed
libsixelc10f11.10.3-alt11.10.3-alt1ALT-PU-2023-1591-1317774Fixed
libsixelp111.10.3-alt11.10.3-alt2ALT-PU-2023-1540-1317765Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/saitoha/libsixel/issues/136
  • Exploit
  • Issue Tracking
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:libsixel_project:libsixel:1.8.6:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top