SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-111144

MediumCVSS 5.5
Published: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

2th percentile - higher than 2% of all known CVEs

Summary

libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag.

Risk Assessment

This can crash applications rendering untrusted XBIN art.

Recommendation

Update libansilove to a version containing the fix or avoid rendering untrusted XBIN files.

Other vulnerabilities in libansilove

Original NVD description (English source)

libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS