Nothings stb_image.h 2.27
Approved changes feed: RSS · Atom
cpe:2.3:a:nothings:stb_image.h:2.27:*:*:*:*:*:*:*part: a version: 2.27 update: *
| Vendor | Nothings (fa9895af-3c4e-566d-93ad-91443ad5c8ab) |
|---|---|
| Product | Stb Image.H (b3cc740d-5120-5070-9357-323356c10a08) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nothings/stb |
purl2cpe | 2026-06-01 10:15:22.259935 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-28042 |
vulnerable | 2026-06-08 05:42:43.992503 |
Details available
stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
Published: 2022-04-15T00:00:00.000Z
Updated: 2024-08-03T05:41:11.387Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28041 |
vulnerable | 2026-06-08 05:42:43.991578 |
Details available
stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Published: 2022-04-15T00:00:00.000Z
Updated: 2024-08-03T05:41:11.417Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42716 |
vulnerable | 2026-06-08 05:35:22.469699 |
Details available
An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_image, or read up to 1024 bytes of non-consecutive heap data without control over the read location.
Published: 2021-10-21T18:36:39.000Z
Updated: 2024-08-04T03:38:49.348Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.