OSV-2021-1787

    Dashboard / Vulnerabilities / OSV-2021-1787

    OSV-2021-1787

    Published: 31 Dec 2021Last Modified: 13 Apr 2022

    Summary: Global-buffer-overflow in stbi__jpeg_decode_block

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113 ``` Crash type: Global-buffer-overflow READ 4 Crash state: stbi__jpeg_decode_block stbi__decode_jpeg_image stbi__jpeg_load ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113

    Affected packages

    Package

    Name: stb

    Purl: pkg:generic/stb

    Affected ranges

    Type: GIT

    Events:

    Introduced- b1826c9894c048e18cce45a289ee1db3fde7f40b
    Fixed -96fe76c21308653d22672e986dd39506f6871421

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1787 | CVE-DB