Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-100611
HistoryOct 25, 2021 - 12:00 a.m.

stb stb_image.h has an unspecified vulnerability

2021-10-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
stb_image.h
security vulnerability
hdr loader
denial of service
crafted hdr file
c/c library

EPSS

0.001

Percentile

50.0%

stb is a single-file public domain library for C/C. stb_image.h is one of the image loaders. stb stb_image.h contains a security vulnerability that stems from the HDR loader parsing truncated file-tailed RLE scan lines into an infinitely long zero-length sequence. An attacker could cause a denial of service in an application using stb_image by submitting a crafted HDR file.