{"id":"CVE-2026-111143","title":"Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records","summary":"Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file endi…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"vendor":"ansilove","product":"libansilove","affected":["libansilove <= 1.4.2"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T19:17:28.563","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-111143","references":[{"url":"https://github.com/ansilove/libansilove","label":"disclosure@vulncheck.com"},{"url":"https://github.com/ansilove/libansilove/blob/f1b05447aa566aa4eef9b05ebf8c2aaf1e379cd3/src/loaders/xbin.c#L169-L241","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@haind-pwn/libansilove-xbin-rle-oob-read-and-null-font-deref","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/ansilove-libansilove-through-1.4.2-out-of-bounds-read-via-ansilove-xbin-rle-decoding","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org","exploit-available"],"ingestedAt":"2026-10-15T19:25:46.412Z","exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T19:43:53.266255Z"},"slug":"CVE-2026-111143","body":"## Overview\n\nAnsilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer, crashing applications that render untrusted XBIN art.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":222726,"id":"CVE-2026-111143","ts":1792097064920,"field":"exploit_available","old":"false","new":"true"}]}