CVE-2021-45340: Libsixel

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.

Affected products

• Libsixel Libsixel: up to and including 1.10.3

Published 2022-01-25. Last modified 2026-06-17.