What’s Vulnerable › Vulnerabilities

CVE-2022-2061: Heap-based Buffer Overflow in hpjansson/chafa

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-13 · updated 2026-06-17
• Weakness: CWE-122

Description

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.

Affected products

• hpjansson/chafa: before 1.12.0 — fixed in 1.12.0

How to fix

Upgrade to a fixed version: hpjansson/chafa 1.12.0. Check the vendor advisory for mitigations.

References

• https://github.com/hpjansson/chafa/commit/e6ce3746cdcf0836b9dae659a5aed15d73a080d8
• https://huntr.dev/bounties/365ab61f-9a63-421c-97e6-21d4653021f0
• https://github.com/hpjansson/chafa/commit/e6ce3746cdcf0836b9dae659a5aed15d73a080d8
• https://huntr.dev/bounties/365ab61f-9a63-421c-97e6-21d4653021f0

Get alerted when CVE-2022-2061 or the next vulnerability affects your stack