SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-111143

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F.

Risk Assessment

This can crash applications rendering untrusted XBIN art.

Recommendation

Update libansilove to a version containing the fix or avoid rendering untrusted XBIN files.

Other vulnerabilities in libansilove

Original NVD description (English source)

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer, crashing applications that render untrusted XBIN art.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS