CVE-2021-42715: Medium severity nothings stb vulnerability
An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-42715?
CVE-2021-42715 is a vulnerability discovered in stb stb_image.h 1.33 through 2.27 where the HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs.
What is the severity of CVE-2021-42715?
The severity of CVE-2021-42715 is medium, with a severity value of 5.5.
How does CVE-2021-42715 affect the software?
CVE-2021-42715 affects the software Nothings Stb Image.h versions 1.33 through 2.27, as well as Fedora versions 33, 34, and 35, and Debian Linux version 10.0.
How can CVE-2021-42715 be exploited?
CVE-2021-42715 can be exploited by an attacker submitting crafted HDR files, potentially causing a denial of service in applications using stb_image.
How can CVE-2021-42715 be fixed?
To fix CVE-2021-42715, users should update to the latest version of stb_image.h (2.28 or later) and follow any recommended security guidelines from the software vendor.