CVE-2021-28021 — Vulnetix

CVE-2021-28021 PUBLISHED CVSS 7.800000190734863 HIGH

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

EPSS 0.19% · 40.5th percentile

Risk Scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.19%

40.5th percentile

Affected Products

Vendor	Product	Versions
fedoraproject	fedora	34, 35
n/a	n/a	n/a
debian	debian_linux	10.0
stb_project	stb	2.26

Exploit Intelligence

https://github.com/nothings/stb/issues/1108 (nist-nvd)
FEDORA-2021-001f25d986 (circl)
FEDORA-2021-f8ba4a690e (circl)
FEDORA-2021-3fc69d203c (circl)
FEDORA-2021-8ea648186c (circl)
FEDORA-2021-16d848834d (circl)
FEDORA-2022-832689aa6b (circl)
[debian-lts-announce] 20230131 [SECURITY] [DLA 3305-1] libstb security update (circl)

Timeline

Oct 15, 2021 CVE Published
Oct 16, 2021 EPSS Score
Dec 11, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 3, 2022 EPSS Score
May 30, 2022 EPSS Score
Jul 26, 2022 EPSS Score
Sep 20, 2022 EPSS Score
Nov 16, 2022 EPSS Score
Jan 11, 2023 EPSS Score

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›