Lucene search

K
cveMitreCVE-2021-37789
HistoryNov 02, 2022 - 1:15 p.m.

CVE-2021-37789

2022-11-0213:15:10
CWE-787
mitre
web.nvd.nist.gov
36
5
cve-2021-37789
stb_image.h
heap-based buffer over
stbi__jpeg_load
information disclosure
dos
nvd

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

60.1%

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service.

Affected configurations

Nvd
Node
stb_projectstbMatch2.27
Node
debiandebian_linuxMatch10.0
VendorProductVersionCPE
stb_projectstb2.27cpe:2.3:a:stb_project:stb:2.27:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Social References

More

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

60.1%