debian/chafa vulnerabilities

Latest debian/chafa CVEs

Newest publication first

1. CVE-2022-2301 Buffer Over-read in hpjansson/chafa

   Published 2022-07-04

   Medium·CVSS 5.5 EPSS 0.66%

   Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.

2. CVE-2022-2061 Heap-based Buffer Overflow in hpjansson/chafa

   Published 2022-06-13

   Low·CVSS 3.3 EPSS 0.43%

   Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.

3. CVE-2022-1507 chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafa

   Published 2022-04-27

   Medium·CVSS 5.5 EPSS 0.89%

   chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_d...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.