Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0018-1

Опубликовано: 21 янв. 2022
Источник: suse-cvrf

Описание

Security update for stb

This update for stb fixes the following issues:

  • CVE-2021-42716: fixed buffer overflow in stb_image PNM loader (boo#1191743)

Список пакетов

SUSE Package Hub 15 SP3
stb-devel-2.32.1549563867.59e9702-bp153.2.3.1
openSUSE Leap 15.3
stb-devel-2.32.1549563867.59e9702-bp153.2.3.1

Ссылки

Описание

An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_image, or read up to 1024 bytes of non-consecutive heap data without control over the read location.

Затронутые продукты
SUSE Package Hub 15 SP3:stb-devel-2.32.1549563867.59e9702-bp153.2.3.1
openSUSE Leap 15.3:stb-devel-2.32.1549563867.59e9702-bp153.2.3.1
Ссылки