Nothings: >> Stb Image.h >> 2.23 Security Vulnerabilities
An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-10-21
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.
CVSS Score
6.5
EPSS Score
0.005
Published
2019-12-29
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
CVSS Score
8.8
EPSS Score
0.003
Published
2019-12-13