7 results (0.039 seconds)

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1

CVE-2022-28041 – Gentoo Linux Security Advisory 202409-15

https://notcve.org/view.php?id=CVE-2022-28041

15 Apr 2022 — stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Se ha detectado que stb_image.h versión v2.27, contiene un desbordamiento de enteros por medio de la función stbi__jpeg_decode_block_prog_dc. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de vectores no especificados Multiple vulnerabilities have been discov... • https://github.com/nothings/stb/issues/1292 • CWE-190: Integer Overflow or Wraparound •

CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 1

CVE-2022-28042 – Gentoo Linux Security Advisory 202409-15

https://notcve.org/view.php?id=CVE-2022-28042

15 Apr 2022 — stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. Se ha detectado que stb_image.h versión v2.27, contenía un uso de memoria previamente liberada en la región heap de la memoria por medio de la función stbi__jpeg_huff_decode Multiple vulnerabilities have been discovered in stb, the worst of which lead to a denial of service. Versions greater than or equal to 20240201 are affected. • https://github.com/nothings/stb/issues/1289 • CWE-416: Use After Free •

CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 2

CVE-2021-42716 – Gentoo Linux Security Advisory 202409-15

https://notcve.org/view.php?id=CVE-2021-42716

21 Oct 2021 — An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_image, or read up to 1024 bytes of non-consecutive heap data without control over the read location. Se ha detectado un problema en stb stb_image.h versión 2.27. El cargador de PNM interpretaba incorrectamente los archivos P... • https://github.com/nothings/stb/issues/1166 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2021-42715 – Gentoo Linux Security Advisory 202409-15

https://notcve.org/view.php?id=CVE-2021-42715

21 Oct 2021 — An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files. Se ha detectado un problema en stb stb_image.h versiones 1.33 hasta 2.27. El cargador HDR analizaba líneas de exploración RLE truncadas al final del archivo como una secuencia infinita de ejecuciones de longitud cero. • https://github.com/nothings/stb/issues/1224 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-20056

https://notcve.org/view.php?id=CVE-2019-20056

29 Dec 2019 — stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. stb_image.h (también se conoce como stb image loader) versión 2.23, como es usado en libsixel y otros productos, tiene un fallo de aserción en stbi__shiftsigned. • https://github.com/saitoha/libsixel/issues/126 • CWE-617: Reachable Assertion •

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2019-19777

https://notcve.org/view.php?id=CVE-2019-19777

13 Dec 2019 — stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main. stb_image.h (también se conoce como stb image loader) versión 2.23, como es usado en libsixel y otros productos, presenta una lectura excesiva del búfer en la región heap de la memoria en la función stbi__load_main. • https://github.com/saitoha/libsixel/issues/109 • CWE-125: Out-of-bounds Read •

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2018-16981

https://notcve.org/view.php?id=CVE-2018-16981

12 Sep 2018 — stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function. stb stb_image.h 2.19, tal y como se emplea en catimg, Emscripten y otros productos, tiene un desbordamiento de búfer basado en memoria dinámica (heap) en la función stbi__out_gif_code. • https://github.com/nothings/stb/issues/656 • CWE-787: Out-of-bounds Write •