CVE-2022-1507

chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file.

• CWE-476
• CWE-476

• https://github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b1004fe6c9Patch, Third Party Advisory
• https://huntr.dev/bounties/104d8c5d-cac5-4baa-9ac9-291ea0bcab95Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PLHKTQYK6AO3M5NAVM3CDVQTZZS6MCO/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIOAZPITFL2Y7Y6KHCZ4OIK7P7KWFN22/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L54UEP5S254VP5FZWGFPHLTPMFJVOGYT/
• https://github.com/hpjansson/chafa/commit/e4b777c7b7c144cd16a0ea96108267b1004fe6c9Patch, Third Party Advisory
• https://huntr.dev/bounties/104d8c5d-cac5-4baa-9ac9-291ea0bcab95Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PLHKTQYK6AO3M5NAVM3CDVQTZZS6MCO/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIOAZPITFL2Y7Y6KHCZ4OIK7P7KWFN22/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L54UEP5S254VP5FZWGFPHLTPMFJVOGYT/

Published

Apr 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1501Inappropriate implementation in iframe in Google Chrome prio…6.5
• CVE-2022-1502Permissions were not properly verified in the API on project…4.3
• CVE-2022-1503A vulnerability, which was classified as problematic, has be…5.4
• CVE-2022-1504XSS in /demo/module/?module=HERE in GitHub repository microw…6.1
• CVE-2022-1505The RSVPMaker plugin for WordPress is vulnerable to unauthen…7.5
• CVE-2022-1506The WP Born Babies WordPress plugin through 1.0 does not san…5.4
• CVE-2022-1508An out-of-bounds read flaw was found in the Linux kernel’s i…6.1
• CVE-2022-1509Command Injection Vulnerability in GitHub repository hestiac…8.8
• CVE-2022-1510An issue has been discovered in GitLab affecting all version…7.5
• CVE-2022-1511Missing Authorization in GitHub repository snipe/snipe-it pr…6.5
• CVE-2022-1512The ScrollReveal.js Effects WordPress plugin through 1.2 doe…4.8
• CVE-2022-1513A potential vulnerability was reported in Lenovo PCManager p…8.8