CVE-2018-20544: There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.

Security readout for executives and security teams

CVE-2018-20544 is a crash-class bug in libcaca, a library used for text-mode graphics rendering. If an application processes hostile or malformed image data through the affected dithering code, it may fail with a floating point exception. Business impact is mainly availability, not confirmed data theft. Exposure is most likely on Linux systems or applications that include libcaca and process untrusted image or graphics input. Servers using media conversion, preview generation, or terminal graphics features deserve review. Evidence for affected products beyond libcaca 0.99.beta19 and downstream distro packages is incomplete. Treat this as maintenance-priority unless libcaca is reachable through internet-facing or automated untrusted file processing. There is no sourced active exploitation signal, but public vendor updates mean exposed systems should be patched through normal security update cycles. Mitigation focus: Apply libcaca security updates from the relevant Linux distribution vendor.; Prioritize Ubuntu, Debian LTS, and openSUSE systems matching the cited advisories.; Check vendor guidance for exact fixed package versions in your environment..

Prepared

Jun 6, 2026, 22:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.