CVE-2022-27938 — Reachable Assertion in Project Libsixel

CWE-617 — Reachable Assertion5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 66.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Libsixel Project Libsixel
Timeline
PublishedMar 26
Latest updateMar 27

Description

stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-4xqw-xqg4-37mf: stb_image↗2022-03-27
▶
OSV
CVE-2022-27938: stb_image↗2022-03-26
▶
CVEList
CVE-2022-27938: stb_image↗2022-03-26
▶

📋Vendor Advisories

1
Debian
CVE-2022-27938: libstb - stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other produ...↗2022
▶
CVE-2022-27938 — Reachable Assertion | cvebase