CVE-2024-25445: 
NixOS vulnerability analysis and mitigation

CVE-2024-25445 is a vulnerability discovered in Hugin version 2022.0.0, specifically affecting the HuginBase::PTools::Transform::transform function. The vulnerability was disclosed on February 9, 2024, and involves improper handling of values that leads to an assertion failure (NVD, CVE).

The vulnerability occurs in the HuginBase::PTools::Transform::transform function of Hugin 2022.0.0. When processing values through the erect_lambertazimuthal() function, an assertion failure is triggered with the message 'pto_merge: math.c:846: erect_lambertazimuthal: Assertion `! isnan(x)' failed.' The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (Launchpad Bug, NVD).

The vulnerability results in an assertion failure in the application, which can lead to program termination. This affects the normal execution of the software, particularly impacting the CLI tool functionality (Launchpad Bug).

The vulnerability has been fixed in Hugin version 2024.0.1+dfsg-1. Users are advised to upgrade to this version or later. The fix was initially implemented in version 2023.0~beta1 (Debian Tracker, Fedora Update).