Assertion Failure in stb_image Loader for libsixel and Other Products
CVE-2019-20056

6.5MEDIUM

Key Information:

Vendor: Nothings
Status: Stb Image.h
Vendor: CVE Published:; 29 December 2019

What is CVE-2019-20056?

The stb_image.h image loader version 2.23 contains a vulnerability characterized by an assertion failure in the function stbi__shiftsigned. This failure can lead to potential disruption of services or unauthorized access when the image loader is utilized in products like libsixel and others. It is essential for users and developers to address this issue in impacted software applications to maintain system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/saitoha/libsixel/issues/126

x_refsource_MISC

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 29, 2019
Vulnerability Reserved
Dec 29, 2019

JSON

Nothings

What is CVE-2019-20056?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.