CVE-2021-42715
—CVSS 3.1
5.5 medium
EPSS
1%p69
Published
()
Modified
Description
An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files.
- Vendors
- nothingsfedoraprojectdebian
- Products
- stb image.h, fedora, debian linux
- Weakness
- CWE-835
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.