Approved changes feed: RSS · Atom

cpe:2.3:a:libsixel_project:libsixel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibsixel Project (deac850d-afab-5b01-a17e-22889eb9095f)
ProductLibsixel (97f444d0-93bb-565c-94b1-910109a66caa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libsixel purl2cpe 2026-06-01 10:15:25.402287
pkg:deb/ubuntu/libsixel purl2cpe 2026-06-01 10:15:25.402289
pkg:github/saitoha/libsixel purl2cpe 2026-06-01 10:15:25.402291
pkg:rpm/opensuse/libsixel purl2cpe 2026-06-01 10:15:25.402292

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45340 vulnerable 2026-06-08 05:36:48.044262 Details available
In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.
Published: 2022-01-25T11:36:09.000Z
Updated: 2024-08-04T04:39:20.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40656 vulnerable 2026-06-08 05:35:18.863009 Details available
libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.
Published: 2022-04-08T15:09:33.000Z
Updated: 2024-08-04T02:51:06.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21050 vulnerable 2026-06-08 05:22:30.668791 Details available
Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.
Published: 2021-09-14T15:09:29.000Z
Updated: 2024-08-04T14:22:25.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21049 vulnerable 2026-06-08 05:22:30.668024 Details available
An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file.
Published: 2021-09-14T15:09:28.000Z
Updated: 2024-08-04T14:22:25.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21048 vulnerable 2026-06-08 05:22:30.665955 Details available
An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a crafted PNG file.
Published: 2021-09-14T15:09:26.000Z
Updated: 2024-08-04T14:22:25.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20024 vulnerable 2026-06-08 05:13:30.396252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20023 vulnerable 2026-06-08 05:13:30.395841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20022 vulnerable 2026-06-08 05:13:30.394244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.