CVE-2026-111144 in libansilove
الملخص
بحسب MITRE • 15/10/2026
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.