CVE-2021-37789

Description

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service.

Affected Platforms

Weakness Type

CWE-787, CWE-787

References

• https://github.com/nothings/stb/issues/1178
• https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
• https://github.com/nothings/stb/issues/1178
• https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html