CVE-2020-19668: Unverified indexes into array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6. #7
Comments
ctrlcctrlv
added a commit
that referenced
this issue
Jun 9, 2021
The type `unsigned short`, which is the type of the LZW code, is much larger than the max of an LZW code, causing a wild pointer. That causes an array overflow. Long term, this library should jettison this unnecessary GIF code, and use a better maintained library for it. In the meantime, however, the issue is simple enough to solve, so I've done so. Resolves CVE-2020-19668. Closes saitoha#136. Closes #7.
ctrlcctrlv
added a commit
that referenced
this issue
Jun 9, 2021
The type `unsigned short`, which is the type of the LZW code, is much larger than the max of an LZW code, causing a wild pointer. That causes an array overflow. Long term, this library should jettison this unnecessary GIF code, and use a better maintained library for it. In the meantime, however, the issue is simple enough to solve, so I've done so. Resolves CVE-2020-19668. Closes saitoha#136. Closes #7.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This is a tracking issue, our version of saitoha#136. I already have a solution.
The text was updated successfully, but these errors were encountered: