CVE-2026-44638
LOW
INFO
Priority: 0.00
BB Relevance:
20/100
Published: 2026-05-14
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
None
UI:
Required
S:
Unchanged
C:
None
I:
None
A:
Low
Description
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_raw and sixel_decode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter (always non-NULL) instead of the value the malloc returned. On allocation failure, the function continues and writes through a NULL pointer, crashing the process. This is a denial of service against any caller of these public APIs that hits a low-memory condition. This vulnerability is fixed in 1.8.7-r2.
References & Advisories (1)
Exploit
Vendor Advisory