PatchTheCVE: libsixelhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-40656: libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.https://patchthecve.com/cve/CVE-2021-40656.htmlhttps://patchthecve.com/cve/CVE-2021-40656.htmlWed, 17 Jun 2026 04:07:13 +0000HIGH 8.8: libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.CVE-2021-41715: libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.https://patchthecve.com/cve/CVE-2021-41715.htmlhttps://patchthecve.com/cve/CVE-2021-41715.htmlWed, 17 Jun 2026 04:08:49 +0000HIGH 8.8: libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.CVE-2022-27938: stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertionhttps://patchthecve.com/cve/CVE-2022-27938.htmlhttps://patchthecve.com/cve/CVE-2022-27938.htmlWed, 17 Jun 2026 04:37:46 +0000MEDIUM 5.5: stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw.CVE-2021-45340: In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixehttps://patchthecve.com/cve/CVE-2021-45340.htmlhttps://patchthecve.com/cve/CVE-2021-45340.htmlWed, 17 Jun 2026 04:13:17 +0000MEDIUM 6.5: In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.