CVE-2022-29977: Medium severity Libsixel Project Libsixel vulnerability
There is an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libsixelto a version that resolves this vulnerability.Fixed in 1:1.8.7-r2-1 - Upgrade
Upgrade
debian/libsixelto a version that resolves this vulnerability.Fixed in 1:1.8.7-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-29977.
What is the title of the vulnerability?
The title of the vulnerability is 'There is an assertion failure error in stbi__jpeg_huff_decode stb_image.h:1894 in libsixel img2sixel…'.
What is the affected software?
The affected software is Libsixel version 1.8.6.
What is the severity of CVE-2022-29977?
The severity of CVE-2022-29977 is medium (6.5).
How can remote attackers exploit CVE-2022-29977?
Remote attackers can exploit CVE-2022-29977 by leveraging the vulnerability to cause a denial-of-service via a crafted JPEG file.