Skip to content
OpenAdvisories
High USN-8318-1 1 CVE

libcaca vulnerability

Published May 27, 2026 · Updated May 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libcaca incorrectly handled certain malformed files.
An attacker could use this issue to cause libcaca to crash, resulting in a
denial of service, or possibly execute arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libcaca 0.99.beta19-2.2ubuntu4.2
Ubuntu · 24.04 LTS 24.04:LTS libcaca 0.99.beta20-4ubuntu0.2
Ubuntu · 25.10 libcaca 0.99.beta20-5ubuntu0.25.10.2
Ubuntu · 26.04 LTS 26.04:LTS libcaca 0.99.beta20-6ubuntu2.1

Vulnerabilities 1

  • High 7.8
    CVE-2026-42046

    libcaca: Heap OOB write in canvas import functions caused by int overflow

    libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a controlled heap out-of-bounds write (heap overflow) by supplying a crafted file in the …

    cacalabs libcaca libcaca libcaca Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-42046