Approved changes feed: RSS · Atom

cpe:2.3:a:libsixel_project:libsixel:1.8.6:*:*:*:*:*:*:*

part: a version: 1.8.6 update: *

VendorLibsixel Project (deac850d-afab-5b01-a17e-22889eb9095f)
ProductLibsixel (97f444d0-93bb-565c-94b1-910109a66caa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libsixel purl2cpe 2026-06-01 10:15:25.402802
pkg:deb/ubuntu/libsixel purl2cpe 2026-06-01 10:15:25.402803
pkg:github/saitoha/libsixel purl2cpe 2026-06-01 10:15:25.402805
pkg:rpm/opensuse/libsixel purl2cpe 2026-06-01 10:15:25.402806

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29978 vulnerable 2026-06-08 05:42:49.994751 Details available
There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Published: 2022-05-11T13:12:05.000Z
Updated: 2024-08-03T06:40:47.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29977 vulnerable 2026-06-08 05:42:49.993751 Details available
There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Published: 2022-05-11T13:10:13.000Z
Updated: 2024-08-03T06:40:46.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27046 vulnerable 2026-06-08 05:41:54.765395 Details available
libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388.
Published: 2022-04-08T14:51:00.000Z
Updated: 2024-08-03T05:18:39.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27044 vulnerable 2026-06-08 05:41:54.764092 Details available
libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.
Published: 2022-04-08T14:58:03.000Z
Updated: 2024-08-03T05:18:39.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46700 vulnerable 2026-06-08 05:38:03.714791 Details available
In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free.
Published: 2022-02-19T18:22:19.000Z
Updated: 2024-08-04T05:17:41.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36120 vulnerable 2026-06-08 05:25:02.460800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19668 vulnerable 2026-06-08 05:20:57.375951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11721 vulnerable 2026-06-08 05:16:47.674520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.