CVE-2022-1507

chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafa

State: Published
Severity: 5.5 Medium
Published: Apr 27, 2022
Updated: Aug 3, 2024
Reserved: Apr 27, 2022

Read the record on cve.org

Description

chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file.

Scores

CVSS	Score	Vector	Source
3.0	5.5 Medium	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	@huntrdev

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
hpjansson/chafahpjansson	before 1.10.2Affected

References

https://huntr.dev/bounties/104d8c5d-cac5-4baa-9ac9-291ea0bcab95
https://github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b1004fe6c9
FEDORA-2022-e72698d659vendor-advisory
FEDORA-2022-4bdf35a1b5vendor-advisory
FEDORA-2022-0aab67e874vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.