UBUNTU-CVE-2021-42716

    Dashboard / Vulnerabilities / UBUNTU-CVE-2021-42716

    UBUNTU-CVE-2021-42716

    Published: 21 Oct 2021Last Modified: 17 Oct 2026
    Upstream:
    CVE-2021-42716

    Summary:

    Details: An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_image, or read up to 1024 bytes of non-consecutive heap data without control over the read location.

    References: https://ubuntu.com/security/CVE-2021-42716, https://github.com/nothings/stb/issues/1166, https://github.com/nothings/stb/issues/1225, https://github.com/nothings/stb/pull/1223, https://www.cve.org/CVERecord?id=CVE-2021-42716

    Affected packages

    Package

    Name: libstb

    Purl: pkg:deb/ubuntu/libstb?arch=source&distro=focal

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    0.0~git20190817.1.052dce1-1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2021-42716 | CVE-DB