PT-2022-11467 · Libsixel+1 · Libsixel+1

A4865Go · Published 2022-04-08 · Updated 2022-04-14 · CVE-2021-41715

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libsixel version 1.10.0

Description The issue is related to a use after free error in the libsixel/src/dither.c file at line 379. This error occurs when the program attempts to access memory that has already been freed, potentially leading to unexpected behavior or crashes.

Recommendations For libsixel version 1.10.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2021-41715

Affected Products

Debian

Libsixel

References · 9

• 🔥 https://github.com/libsixel/libsixel/issues/27 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2021-41715 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-41715 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-41715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41715 · Security Note
• https://ubuntu.com/security/CVE-2021-41715 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-41715 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41715 · Vendor Advisory
• https://t.me/cibsecurity/40384 · Telegram Post