CVE-2022-28041: Integer Overflow
stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libstbto a version that resolves this vulnerability.Fixed in 0.0~git20241109.5c20573+ds-1Fixed in 0.0~git20250907.fede005+ds-1 - Upgrade
Upgrade
debian/libstbto a version that resolves this vulnerability.Fixed in 0.0~git20230129.5736b15+ds-1
Event History
Frequently Asked Questions
What is CVE-2022-28041?
CVE-2022-28041 is a vulnerability in stb_image.h v2.27 that allows attackers to cause a Denial of Service (DoS) through an integer overflow.
How severe is CVE-2022-28041?
CVE-2022-28041 has a severity rating of 6.5, which is considered medium.
How does CVE-2022-28041 affect Nothings Stb Image.h?
CVE-2022-28041 affects Nothings Stb Image.h version 2.27.
What is the impact of CVE-2022-28041?
The impact of CVE-2022-28041 is a Denial of Service (DoS) attack.
Are there any patches available for CVE-2022-28041?
Yes, patches for CVE-2022-28041 are available. Please refer to the provided references for more information.