CVE-2026-44638

LOW EPSS 3.0%
Published May 14, 20261mo ago · Modified Jun 17, 20261w ago
2.5 CVSS 3.1
Low
Find Similar
Published May 14, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_raw and sixel_decode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter (always non-NULL) instead of the value the malloc returned. On allocation failure, the function continues and writes through a NULL pointer, crashing the process. This is a denial of service against any caller of these public APIs that hits a low-memory condition. This vulnerability is fixed in 1.8.7-r2.

CVSS Details

Base Score
2.5
Exploitability
1.0
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity None
Availability Low

Threat Intelligence

EPSS Exploit Probability
3.0% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 2

CWE-476 NULL Pointer Dereference Memory Safety
CWE-690

Affected Products 1

VendorProductVersionRange
saitohalibsixel*≥1.0.0  –  <1.8.7-r2

References 1

  • github.com https://github.com/saitoha/libsixel/security/advisories/GHSA-wpx3-h5g8-qr3w
    ExploitVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.