Approved changes feed: RSS · Atom

cpe:2.3:a:chafa_project:chafa:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChafa Project (94f11c14-6a82-53b0-89e1-28607523474c)
ProductChafa (8dbf6623-a345-5ee3-9223-4de995e5ada5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/chafa purl2cpe 2026-06-01 10:16:03.755682
pkg:deb/ubuntu/chafa purl2cpe 2026-06-01 10:16:03.755686
pkg:github/hpjansson/chafa purl2cpe 2026-06-01 10:16:03.755688
pkg:rpm/fedora/chafa purl2cpe 2026-06-01 10:16:03.755691
pkg:rpm/opensuse/chafa purl2cpe 2026-06-01 10:16:03.755694

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2301 vulnerable 2026-06-08 05:43:35.251165 Buffer Over-read in hpjansson/chafa
MEDIUM (5.5)
Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.
Published: 2022-07-04T10:30:22.000Z
Updated: 2024-08-03T00:32:09.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2061 vulnerable 2026-06-08 05:42:50.178900 Heap-based Buffer Overflow in hpjansson/chafa
LOW (2.8)
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.
Published: 2022-06-13T11:30:25.000Z
Updated: 2024-08-03T00:24:44.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1507 vulnerable 2026-06-08 05:39:13.326043 chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafa
MEDIUM (5.5)
chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file.
Published: 2022-04-27T16:55:10.000Z
Updated: 2024-08-03T00:03:06.379Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.