CVE-2022-29978: Medium severity Libsixel Project Libsixel vulnerability
There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libsixelto a version that resolves this vulnerability.Fixed in 1:1.8.7-r2-1 - Upgrade
Upgrade
debian/libsixelto a version that resolves this vulnerability.Fixed in 1:1.8.7-1
Event History
Frequently Asked Questions
What is the vulnerability ID of this flaw?
The vulnerability ID is CVE-2022-29978.
Where does the vulnerability occur?
The vulnerability occurs in the sixel_encoder_do_resize function in encoder.c at line 633 of libsixel img2sixel 1.8.6.
What is the severity level of CVE-2022-29978?
The severity level of CVE-2022-29978 is medium.
How can remote attackers exploit this vulnerability?
Remote attackers can leverage this vulnerability by using a crafted JPEG file to cause a denial-of-service.
Is there a fix available for this vulnerability?
At the time of writing, there is no publicly known fix available for CVE-2022-29978. It is recommended to follow the advisory provided by the vendor or the software developer for any updates or patches.