Approved changes feed: RSS · Atom

cpe:2.3:a:saitoha:libsixel:1.8.2:*:*:*:*:*:*:*

part: a version: 1.8.2 update: *

VendorSaitoha (9631dca1-8a4b-5a3d-9517-129366436389)
ProductLibsixel (644000ca-a5a4-5d28-9c77-9704f7aa56f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libsixel purl2cpe 2026-06-01 10:16:35.222409
pkg:deb/ubuntu/libsixel purl2cpe 2026-06-01 10:16:35.222410
pkg:github/libsixel/libsixel purl2cpe 2026-06-01 10:16:35.222411
pkg:github/saitoha/libsixel purl2cpe 2026-06-01 10:16:35.222413
pkg:rpm/fedora/libsixel purl2cpe 2026-06-01 10:16:35.222414
pkg:rpm/opensuse/libsixel purl2cpe 2026-06-01 10:16:35.222416

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-21547 vulnerable 2026-06-08 05:22:30.886763 Details available
Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.
Published: 2021-09-17T20:34:24.000Z
Updated: 2024-08-04T14:30:33.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3574 vulnerable 2026-06-08 05:13:55.095927 Details available
In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel.
Published: 2019-01-02T15:00:00.000Z
Updated: 2024-09-17T02:36:15.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3573 vulnerable 2026-06-08 05:13:55.095489 Details available
In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.
Published: 2019-01-02T15:00:00.000Z
Updated: 2024-09-16T20:31:38.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19778 vulnerable 2026-06-08 05:13:23.680230 Details available
An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c.
Published: 2019-12-13T01:06:17.000Z
Updated: 2024-08-05T02:25:12.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19777 vulnerable 2026-06-08 05:13:23.679737 Details available
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
Published: 2019-12-13T01:05:52.000Z
Updated: 2024-08-05T02:25:12.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19638 vulnerable 2026-06-08 05:13:23.213482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19637 vulnerable 2026-06-08 05:13:23.213176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19636 vulnerable 2026-06-08 05:13:23.212746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19635 vulnerable 2026-06-08 05:13:23.212331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11024 vulnerable 2026-06-08 05:12:26.220853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19763 vulnerable 2026-06-08 05:11:16.083029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19762 vulnerable 2026-06-08 05:11:16.082704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19761 vulnerable 2026-06-08 05:11:16.082342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19759 vulnerable 2026-06-08 05:11:16.076968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19757 vulnerable 2026-06-08 05:11:16.075948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19756 vulnerable 2026-06-08 05:11:16.075526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.