CVE-2020-21049: Saitoha Libsixel

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file.

Affected products

• Saitoha Libsixel: before 1.8.5 (fixed in 1.8.5)

Published 2021-09-14. Last modified 2026-06-17.