CVE-2025-61146

Katalog CVE

CVSS 4.0 · Medium EPSS 0,13%

Kerentanan Missing Release of Memory after Effective Lifetime pada saitoha libsixel. Skor CVSS 3.1 4.0 (Medium) menurut CISA ADP.

Deskripsi (NVD)

saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c.

Rincian

Terbit di NVD

23 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.0 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 1,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/saitoha/libsixel/issues/207 issue tracking · advisory vendor
• https://github.com/saitoha/libsixel/commit/e0ba6685262a3679cc5b9009c0c5b7dc8a3f262e patch
• https://gist.github.com/optionGo/1100e5be05c5558501a95f5e99160584 advisory pihak ketiga