A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libcaca | Aug 22, 2024 | May 26, 2021 |
| Debian | — | Upgrade libcaca | Apr 8, 2024 | May 26, 2021 |
| Freebsd | — | Upgrade libcaca | Feb 8, 2025 | Feb 7, 2025 |
| Suse | — | Upgrade libcaca0Upgrade libcaca0-pluginsUpgrade libcacaUpgrade caca-utilsUpgrade libcaca0-32bitUpgrade libcaca0-plugins-32bitUpgrade libcaca-develUpgrade python3-cacaUpgrade libcaca-ruby | Mar 9, 2022 | May 26, 2021 |
| Ubuntu | — | Upgrade caca-utils (Ubuntu Pro)Upgrade caca-utilsUpgrade libcaca0Upgrade libcaca0 (Ubuntu Pro) | Oct 22, 2021 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub