4.3
CVSSv2

CVE-2021-45340

Published: 25/01/2022 Updated: 28/01/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows malicious users to cause a denial of service (DOS) via a crafted PICT file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libsixel project libsixel

Vendor Advisories

Debian Bug report logs - #1004377 libsixel: CVE-2021-45340 Package: src:libsixel; Maintainer for src:libsixel is NOKUBI Takatsugu <knok@daionetgrjp>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 26 Jan 2022 08:48:01 UTC Severity: important Tags: security, upstream Found in version libsixel/110 ...