Buffer Overflow in stbi__extend_receive of stb Image Library Affecting Multiple Platforms

CVE-2021-28021

What is CVE-2021-28021?

A buffer overflow vulnerability is present in the stbi__extend_receive function within stb_image.h of the stb library version 2.26. This threat can be exploited through specially crafted JPEG files, potentially allowing an attacker to execute arbitrary code or crash applications that use this library for image processing. The vulnerability highlights the importance of proper input validation and memory management in handling image files.

References