https://bugzilla.suse.com/show_bug.cgi?id=1198965 Bug ID: 1198965 Summary: VUL-1: CVE-2022-1507: chafa: NULL Pointer Dereference in function gif_internal_decode_frame Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/330190/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: mvetter@suse.com Reporter: cathy.hu@suse.com QA Contact: security-team@suse.de Found By: Security Response Team Blocker: --- CVE-2022-1507 chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1507 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1507 https://github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b100... https://huntr.dev/bounties/104d8c5d-cac5-4baa-9ac9-291ea0bcab95 -- You are receiving this mail because: You are on the CC list for the bug.