saitoha CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM saitoha CVE published 2026-10-14

CVE-2026-110601

A heap out-of-bounds write vulnerability exists in libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 in the gif_init_frame() function. This vulnerability occurs because the GIF transparent color index is not checked against the palette size, allowing attackers to supply a crafted GIF that can write bytes past the palette buffer, causing heap corruption or crashes.