https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-44638.htmlhttps://patchthecve.com/cve/CVE-2026-44638.htmlMon, 26 Oct 2026 14:10:00 +0000LOW 2.5: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_raw and sixel_decode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter (alwhttps://patchthecve.com/cve/CVE-2026-44637.htmlhttps://patchthecve.com/cve/CVE-2026-44637.htmlMon, 26 Oct 2026 14:10:00 +0000HIGH 7.1: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a signed integer overflow in the SIXEL parser's image-buffer doubling loop can lead to an out-of-bounds heap write in sixel_decode_raw_impl. context->pos_x grows by repeat_count on every sixel characterhttps://patchthecve.com/cve/CVE-2026-44636.htmlhttps://patchthecve.com/cve/CVE-2026-44636.htmlMon, 26 Oct 2026 14:10:00 +0000HIGH 7.4: libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, signed integer overflow in sixel_encode_highcolor's allocation size calculation can lead to a heap buffer overflow. The public sixel_encode entry point validates only that width and height are greater t