CVE-2025-9300

Description

A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.c of the component img2sixel. The manipulation results in stack-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is identified as 316c086e79d66b62c0c4bc66229ee894e4fdb7d1. Applying a patch is advised to resolve this issue.

Weakness classification

• cna@vuldb.com: CWE-119
• nvd@nist.gov: CWE-787

Primary references

• cna@vuldb.com — Exploit
• cna@vuldb.com — Patch
• cna@vuldb.com — Exploit, Issue Tracking
• cna@vuldb.com — Exploit, Issue Tracking
• cna@vuldb.com — Permissions Required, VDB Entry
• cna@vuldb.com — Third Party Advisory, VDB Entry
• cna@vuldb.com — Exploit, Third Party Advisory, VDB Entry
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Patch
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory, VDB Entry