tocsin

Debian/libstb: high 8.1

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service.

Action: Upgrade libstb to 0.0~git20210910.af1a5bc+ds-1 or later.

Affected

introducedfixedlast affected
0--

Fixed versions

0.0~git20210910.af1a5bc+ds-1

Sources

published · modified · JSON