VYPR
Medium severity5.5NVD Advisory· Published Mar 26, 2022· Updated Apr 24, 2026

CVE-2022-27938

CVE-2022-27938

Description

stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw.

Affected products

2
  • Saitoha/Libsixel2 versions
    cpe:2.3:a:libsixel:libsixel:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:libsixel:libsixel:*:*:*:*:*:*:*:*range: <1.10.4
    • cpe:2.3:a:saitoha:libsixel:*:*:*:*:*:*:*:*range: <1.8.7

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.