CVE-2022-2301: Chafa Project Chafa

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.

Affected products

• Chafa Project Chafa: before 1.10.3 (fixed in 1.10.3)

Published 2022-07-04. Last modified 2026-06-17.