CVE-2022-27938

MEDIUM

libsixel - Reachable Assertion in stb_image.h stbi__create_png_image_raw

Title source: llm

stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw.

Core 1

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

CVSS v3 5.5

EPSS 0.0060

EPSS Percentile 44.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-617

Status published

Products (1)

libsixel_project/libsixel 2.19

Published Mar 26, 2022

Tracked Since Feb 18, 2026