CVE WATCH / VULNERABILITY DETAIL

CVE-2026-111143

MEDIUMCVSS 5.5NVD feed

Published 15 October 2026 · tracked since 16 October 2026

Description

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools