CVE-2022-28048

Description

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.

Affected Platforms

Weakness Type

CWE-682

References

• https://github.com/nothings/stb/issues/1293
• https://github.com/nothings/stb/pull/1297
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://github.com/nothings/stb/issues/1293