4.3
CVSSv2

CVE-2020-11721

Published: 12/04/2020 Updated: 13/04/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libsixel project libsixel 1.8.6

Vendor Advisories

Debian Bug report logs - #972641 CVE-2020-11721 Package: src:libsixel; Maintainer for src:libsixel is NOKUBI Takatsugu <knok@daionetgrjp>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 21 Oct 2020 17:57:01 UTC Severity: normal Tags: security, upstream Forwarded to githubcom/saitoha/libsix ...