CVE-2025-9300

Medium

Description

A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.c of the component img2sixel. The manipulation results in stack-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is identified as 316c086e79d66b62c0c4bc66229ee894e4fdb7d1. Applying a patch is advised to resolve this issue.

SeverityMedium

CVSS5.3

Exploit probability—

ProductSaitoha Libsixel

PublishedAug 21, 2025

First seenAug 21, 2025

Weakness typeCWE-121CWE-121 CWE-119Memory buffer bounds error

How to fix

Update

saitoha libsixel1.8.7 or later

Patches

github.com/saitoha/libsixel/commit/316c086e79d66b62c0c4bc66229ee894e4fdb7d1

Affected products

Product	Affected versions	Fixed in
saitoha libsixel	v < 1.8.7	1.8.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.