CVE-2022-28041

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc

published April 15, 2022

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02093 · 81.5th percentile
Published
2022-04-15T00:00Z
EPSS history
Timeline
  • 15 APR 00:00Z
    stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc
    cvelistv5