CVE-2022-29978

Name of the Vulnerable Software and Affected Versions libsixel img2sixel version 1.8.6

Description The issue is related to a floating point exception error in the sixel encoder do resize function, located in encoder.c:633 of libsixel img2sixel. This error can be triggered by remote attackers using a crafted JPEG file, potentially causing a denial-of-service.

Recommendations For libsixel img2sixel version 1.8.6, consider disabling the sixel encoder do resize function as a temporary workaround until a patch is available. Restrict the processing of JPEG files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.