CVE catalog

CVE-2022-43151

timg: CVE-2022-43151

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 25, 2026

timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantimgsid1.6.3-1fixed
Debiantimgforky1.6.3-1fixed
Debiantimgtrixie1.6.0-1fixed
Debiantimgbookworm1.4.5-1+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantimgsourcesid1.4.5-1unimportantNot reportedNot reported
Debiantimgsourceforky1.4.5-1unimportantNot reportedNot reported
Debiantimgsourcetrixie1.4.5-1unimportantNot reportedNot reported
Debiantimgsourcebookworm1.4.5-1unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [timg]Fixed
    Details (2)
    • 1.4.5-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.4.5-1

      dsa · timg · debian · bookworm

    • 1.4.5-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.4.5-1

      dsa · timg · debian · bookworm

Observed:

References