Lucene search

GoogleOSV:CVE-2022-1507

HistoryApr 27, 2022 - 5:15 p.m.

CVE-2022-1507

2022-04-2717:15:07

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file.

CPENameOperatorVersion
chafaeq1.8.0
chafaeq1.10.1
chafaeq1.4.0
chafaeq1.2.0
chafaeq1.6.0
chafaeq1.10.0
chafaeq0.9.0
chafaeq1.0.0

Name	Operator	Version
chafa	eq	1.8.0
chafa	eq	1.10.1
chafa	eq	1.4.0
chafa	eq	1.2.0
chafa	eq	1.6.0
chafa	eq	1.10.0
chafa	eq	0.9.0
chafa	eq	1.0.0

References

github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b1004fe6c9

huntr.dev/bounties/104d8c5d-cac5-4baa-9ac9-291ea0bcab95

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PLHKTQYK6AO3M5NAVM3CDVQTZZS6MCO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIOAZPITFL2Y7Y6KHCZ4OIK7P7KWFN22/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L54UEP5S254VP5FZWGFPHLTPMFJVOGYT/