Libcaca Project Libcaca vulnerabilities

10 vulnerabilities

Known vulnerabilities in Libcaca Project Libcaca, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2018-20547canonicalubuntu_linux+6
EPSS score
1.80%
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.
8.8CVE-2018-20545canonicalubuntu_linux+5
EPSS score
2.39%
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
8.1CVE-2018-20546canonicalubuntu_linux+6
EPSS score
2.31%
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
8.8CVE-2018-20548canonicalubuntu_linux+5
EPSS score
1.81%
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
8.8CVE-2018-20549canonicalubuntu_linux+6
EPSS score
1.83%
There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
6.5CVE-2018-20544canonicalubuntu_linux+4
EPSS score
1.87%
There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
7.8CVE-2021-30498debianlibcaca+3
EPSS score
1.35%
A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.
7.8CVE-2021-30499debianlibcaca+3
EPSS score
1.24%
A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential consequences.
7.8CVE-2021-3410debianlibcaca+13
EPSS score
0.56%
A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.
6.5CVE-2022-0856debianlibcaca+11
EPSS score
2.75%
libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service