stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
stbimage.h v2.27 was discovered to contain an heap-based use-after-free via the function stbijpeghuffdecode.