PatchFirst · Vulnérabilités récentes
Vulnérabilités publiées pour libansilove au cours des 30 derniers jours : 2. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 2
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.
Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer, crashing applications that render untrusted XBIN art.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.