CVE-2022-1507mediumCWE-476

CVE-2022-1507: medium-severity vulnerability in hpjansson/chafa

chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafa

Published · Updated

Follow this CVE+ Monitor hpjansson/chafa+ Monitor chafa

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.9%
chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
hpjansson · hpjansson/chafa
Related CVEs — hpjansson/chafa

In the same product, most dangerous first.

CVE-2022-2301MEDIUMBuffer Over-read in hpjansson/chafaEPSS 0.7%CVE-2022-2061LOWHeap-based Buffer Overflow in hpjansson/chafaEPSS 0.4%