Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-100610
HistoryOct 25, 2021 - 12:00 a.m.

Unspecified vulnerability exists in stb stb_image.h (CNVD-2021-100610)

2021-10-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
unspecified vulnerability
stb_image.h
cnvd-2021-100610
attacker
crash service
non-contiguous heap data

EPSS

0.002

Percentile

59.0%

stb is a single-file public domain library for C/C. stb_image.h is one of the image loaders. stb stb_image.h is vulnerable, and an attacker could use stb_image to crash the service or read up to 1024 bytes of non-contiguous heap data without controlling where it is read.