CVEvulnerability

CVE-2026-44638

2.5 LOW Published 2026-05-14 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-05-14
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.5 LOW — CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
2.5 LOW — CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Weaknesses
CWE-476, CWE-690

Description

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_raw and sixel_decode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter (always non-NULL) instead of the value the malloc returned. On allocation failure, the function continues and writes through a NULL pointer, crashing the process. This is a denial of service against any caller of these public APIs that hits a low-memory condition. This vulnerability is fixed in 1.8.7-r2.

Affected configurations

• saitoha libsixel (>= 1.0.0 < 1.8.7-r2)

Related

Weakness · CWE (2)

  • CWE-476 NULL Pointer Dereference weakness
  • CWE-690 Unchecked Return Value to NULL Pointer Dereference weakness

References