PT-2026-41034 · Libsixel · Libsixel

Saitohapublished · Published 2026-05-14 · Updated 2026-05-14 · CVE-2026-44638

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libsixel versions prior to 1.8.7-r2

Description A NULL pointer dereference occurs in the sixel decode raw() and sixel decode() functions due to an incorrect NULL check following an allocation call. The check validates the address of the output parameter rather than the value returned by malloc(). Consequently, if an allocation fails during a low-memory condition, the process attempts to write through a NULL pointer, leading to a crash and resulting in a denial of service for any caller of these public APIs.

Recommendations Update to version 1.8.7-r2.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-690

CWE-476

Related Identifiers

CVE-2026-44638

GHSA-WPX3-H5G8-QR3W

Affected Products

Libsixel

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44638.json · Exploit
• 🔥 https://github.com/saitoha/libsixel/security/advisories/GHSA-wpx3-h5g8-qr3w · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-44638 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-44638 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44638 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-44638 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44638 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-44638 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44638 · Security Note
• https://twitter.com/CVEnew/status/2055074241540653313 · Twitter Post