4

CVE-2025-61146

saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Saitoha ≫ Libsixel Version < 1.8.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 4 2.5 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://github.com/saitoha/libsixel/issues/207
Vendor Advisory
Issue Tracking
https://github.com/saitoha/libsixel/commit/e0ba6685262a3679cc5b9009c0c5b7dc8a3f262e
Patch
https://gist.github.com/optionGo/1100e5be05c5558501a95f5e99160584
Third Party Advisory