CVE-2020-21050

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at...

6.5 MediumFix available

CVE-2020-21050 is a medium vulnerability (CVSS 6.5) in Saitoha Libsixel, published September 14, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. Fixed in libsixel 1.8.6-1.

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.55%Up 0.3 points since Sep 15, 2021

What each source reports

NVD Score used 6.5

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: CVE-2020-21050
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: CVE-2020-21050
Updated: 2026-11-02

EUVDEUVD-2020-13829 No score

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: EUVD-2020-13829
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v5qv-jjr8-5wpj 6.5

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at...

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: GHSA-v5qv-jjr8-5wpj
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-119, CWE-787
Updated: 2026-11-02

OSV 6.5

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: CVE-2020-21050
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2020-21050 6.5

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: DEBIAN-CVE-2020-21050
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2020-21050 6.5

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

Record: UBUNTU-CVE-2020-21050
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Affected products

saitoha libsixel

Affected packages

Affected packages
Package	Affected	Fixed
`libsixel` Debian:12	before 1.8.6-1	1.8.6-1
`libsixel` Debian:13	before 1.8.6-1	1.8.6-1
`libsixel` Debian:14	before 1.8.6-1	1.8.6-1
`libsixel` Ubuntu:16.04:LTS	All versions, plus listed versions 1.4.2-11.5.2-2	None known
`libsixel` Ubuntu:18.04:LTS	All versions, plus listed versions 1.5.2-21.7.3-1	None known
`libsixel` Ubuntu:20.04:LTS	All versions, plus listed versions 1.8.2-11.8.2-2.1	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 6 moreShow less