Medium severity5.5NVD Advisory· Published Oct 15, 2026· Updated Oct 15, 2026
CVE-2026-111143
CVE-2026-111143
Description
Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer, crashing applications that render untrusted XBIN art.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.4.2
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.