4.3
CVSSv2

CVE-2022-29977

Published: 11/05/2022 Updated: 19/05/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libsixel project libsixel 1.8.6

Vendor Advisories

Debian Bug report logs - #1014526 libsixel: CVE-2022-29977 Package: src:libsixel; Maintainer for src:libsixel is NOKUBI Takatsugu <knok@daionetgrjp>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Thu, 7 Jul 2022 15:33:01 UTC Severity: normal Tags: security Reply or subscribe to this bug Toggle usel ...