CVE-2020-21547: 
NixOS vulnerability analysis and mitigation

CVE-2020-21547 affects Libsixel version 1.8.2, which contains a heap-based buffer overflow vulnerability in the ditherfuncfs function within tosixel.c. The vulnerability was discovered and reported on December 13, 2019 (GitHub Issue).

The vulnerability is a heap-based buffer overflow that occurs in the ditherfuncfs function at line 861 of tosixel.c. The issue manifests when processing high-color images using the img2sixel command with the --high-color option. According to the National Vulnerability Database, this vulnerability has been assigned a CVSS v3.1 Base Score of 8.8 (HIGH) with the vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

The vulnerability could potentially lead to unauthorized access to memory locations, which may result in program crashes or potential code execution. The CVSS score indicates that successful exploitation could lead to high impacts on confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability has been fixed in later versions of libsixel. Debian has addressed this issue in multiple releases: bullseye (1.8.6-2), bookworm (1.10.3-3), and sid/trixie (1.10.5-1) all contain the fix (Debian Security).