Threat database

A NULL pointer dereference vulnerability exists in libansilove versions 1.3.0 through 1.4.2 in the ansilove_xbin() function. This flaw can cause applications to crash when processing a specially crafted XBIN file that sets the 512-character flag without the custom-font flag, leading to a NULL pointer being dereferenced in drawchar().

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer, crashing applications that render untrusted XBIN art.