CVE catalog

CVE-2019-19637

libsixel: CVE-2019-19637

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.23% · Oct 25, 2026

An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_decode_raw_impl at fromsixel.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibsixelsid1:1.8.7-r2-1fixed
Debianlibsixelforky1:1.8.7-r2-1fixed
Debianlibsixeltrixie1.10.5-1fixed
Debianlibsixelbookworm1.10.3-3fixed
Ubuntulibsixel16.041.4.2-1vulnerable
Ubuntulibsixel16.041.5.2-2vulnerable
Ubuntulibsixel18.041.5.2-2vulnerable
Ubuntulibsixel18.041.7.3-1vulnerable
Ubuntulibsixel20.041.8.2-1vulnerable
Ubuntulibsixel20.041.8.2-2.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibsixelsourcesid1.8.6-1lowNot reported[948103]
Debianlibsixelsourceforky1.8.6-1lowNot reported[948103]
Debianlibsixelsourcetrixie1.8.6-1lowNot reported[948103]
Debianlibsixelsourcebookworm1.8.6-1lowNot reported[948103]

[Debian bug #948103]

OpenFactory catalog packages

Vulnerability data is temporarily unavailable.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]