Vulnerability CVE-2021-42715: Information

Description

An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:nothings:stb_image.h:*:*:*:*:*:*:*:*

      Start including

      1.33

      End including

      2.27

      ---

      Configuration 2

      cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

      ---

      Configuration 3

      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      ---