What’s Vulnerable › Vulnerabilities

CVE-2025-9300: saitoha libsixel img2sixel encoder.c sixel_debug_print_palette stack-based overflow

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-21 · updated 2026-06-17
• Weakness: CWE-119

Description

A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.c of the component img2sixel. The manipulation results in stack-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is identified as 316c086e79d66b62c0c4bc66229ee894e4fdb7d1. Applying a patch is advised to resolve this issue.

Affected products

• saitoha libsixel: before 1.8.7 — fixed in 1.8.7

How to fix

Upgrade to a fixed version: saitoha libsixel 1.8.7. Check the vendor advisory for mitigations.

References

• https://drive.google.com/file/d/1IIvvRFgUQZcySqeoqXXhsxd0HZCjClJ7/view?usp=sharing
• https://github.com/saitoha/libsixel/commit/316c086e79d66b62c0c4bc66229ee894e4fdb7d1
• https://github.com/saitoha/libsixel/issues/200
• https://github.com/saitoha/libsixel/issues/200#issuecomment-3178785635
• https://vuldb.com/?ctiid.320905
• https://vuldb.com/?id.320905
• https://vuldb.com/?submit.632366
• https://github.com/saitoha/libsixel/commit/316c086e79d66b62c0c4bc66229ee894e4fdb7d1
• https://github.com/saitoha/libsixel/issues/200
• https://github.com/saitoha/libsixel/issues/200#issuecomment-3178785635
• https://vuldb.com/?submit.632366

Get alerted when CVE-2025-9300 or the next vulnerability affects your stack