saitoha / libsixel

A SIXEL encoder/decoder implementation derived from kmiya's sixel (https://github.com/saitoha/sixel).
MIT License
2.45k stars 82 forks source link

double free or corruption in encoder.c:831 #158

Closed p870613 closed 3 months ago

p870613 commented 2 years ago

Hi, I found a double free or corruption in the current master 6a5be8b, OS: ubuntu 18.04 kernel: 5.4.0-87-generic

POC: poc.zip

image

carnil commented 2 years ago

CVE-2021-46700 appears to have been assigned to this issue.