Source: libsixel
X-Debbugs-CC: t...@security.debian.org
Severity: normal
Tags: security

Hi,

The following vulnerability was published for libsixel.

CVE-2022-29977[0]:
| There is an assertion failure error in stbi__jpeg_huff_decode,
| stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could
| leverage this vulnerability to cause a denial-of-service via a crafted
| JPEG file.

https://github.com/libsixel/libsixel/issues/62

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2022-29977
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29977

Please adjust the affected versions in the BTS as needed.

Reply via email to