Vulnerabilities

TI-2021-15637 CVE-2021-37789 · GHSA-3fjh-5fm6-fqmw

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information…

LOW 37

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01002 Published 2022-11-02 Will not fix CWE-787

TI-2022-10875 CVE-2022-28048 · GHSA-hh7c-jpm3-846q

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.

MEDIUM 41

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01595 Published 2022-04-15 Will not fix CWE-682

TI-2021-09301 CVE-2021-28021 · GHSA-w9gr-856x-c2gv

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

LOW 37

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0143 Published 2021-10-15 Will not fix CWE-787

TI-2019-11241 CVE-2019-15058 · GHSA-77mw-2mfc-5cxm

stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in…

MEDIUM 44

stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load, leading to Information Disclosure or Denial of Service.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02796 Published 2019-08-14 Will not fix CWE-125

Vulnerabilities

Filters

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information…

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in…