Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-77874
HistoryMay 13, 2022 - 12:00 a.m.

libsixel img2sixel Denial of Service Vulnerability (CNVD-2022-77874)

2022-05-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

47.5%

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 is vulnerable to a denial-of-service vulnerability, which stems from an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 . A remote attacker could exploit this vulnerability to cause a denial of service via a specially crafted JPEG file.

CPENameOperatorVersion
libsixel img2sixel img2sixeleq1.8.6

0.001 Low

EPSS

Percentile

47.5%