CVE-2026-111144 — libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file…
Published: 2026-10-15 · CVSS: 6.8 · CVSS 4.0
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7