CVE-2026-111144 [MEDIUM] – libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansil

libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.