CVE Intelligence

Ansilove vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ansilove products: 2 record(s), with severity, exploitation and fixes.

Libansilove 2

Exploited only (KEV) →

CVE-2026-111144 Medium · 5.5 CWE-476 Oct 15, 2026
libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.
CVE-2026-111143 Medium · 5.5 CWE-125 Oct 15, 2026
Ansilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE Decoding
Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer, crashing applications that render untrusted XBIN art.