An issue exists in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c.
libsixel project libsixel 1.8.2