nothings stb image.h 2.27 vulnerabilities and exploits

(subscribe to this query)

516

VMScore

An issue exists in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_...

Nothings Stb Image.h 2.27 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

383

VMScore

stb_image.h v2.27 exists to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows malicious users to cause a Denial of Service (DoS) via unspecified vectors.

Nothings Stb Image.h 2.27 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 10.0

605

VMScore

stb_image.h v2.27 exists to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.

Nothings Stb Image.h 2.27 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 10.0

383

VMScore

An issue exists in stb stb_image.h 1.33 up to and including 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting craft...

Nothings Stb Image.h Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 10.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook