CVE-2020-11721

Medium

load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a…

mitre·CWE-824·Published 2020-04-12

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

154 chars

load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.

NVDen

154 chars

load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.

NVDes

234 chars

La función load_png en el archivo loader.c en la biblioteca libsixel.a en libsixel versión 1.8.6, presenta un puntero no inicializado conllevando a una llamada no válida para liberación, lo que puede causar una denegación de servicio.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H