CVE-2018-16981: Buffer Overflow
stb stbimage.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbioutgifcode function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.195+dfsg.1-2ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.220+dfsg.1-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.242+dfsg.1-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.264+dfsg.1-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.277+dfsg.1-4ubuntu0.1
Event History
Frequently Asked Questions
What is CVE-2018-16981?
CVE-2018-16981 is a vulnerability in the stb_image.h library, version 2.19, which can lead to a heap-based buffer overflow in certain products.
What is the severity of CVE-2018-16981?
The severity of CVE-2018-16981 is high, with a CVSS score of 8.8.
Which products are affected by CVE-2018-16981?
The products affected by CVE-2018-16981 include catimg, Emscripten, and others that use the stb_image.h library version 2.19.
How can I fix CVE-2018-16981?
To fix CVE-2018-16981, update the stb_image.h library to a version that includes the security patch.
Where can I find more information about CVE-2018-16981?
You can find more information about CVE-2018-16981 on the official GitHub page of stb_image.h and the Debian LTS Announce mailing list.