Integer Shift Vulnerability in STB Image Library by Nothings
CVE-2022-28048

8.8HIGH

Key Information:

Vendor: Stb Project
Status: Stb
Vendor: CVE Published:; 15 April 2022

🔔 Create Stb Project Vulnerability Alert

What is CVE-2022-28048?

The STB Image Library, specifically version 2.27, demonstrates a vulnerability due to an integer shift of an invalid size within the jpeg decoding process. This flaw could potentially lead to incorrect processing of JPEG images by the library, affecting applications relying on its functionality. Developers using this library should review their implementations and consider updating to mitigates risks associated with this flaw. Related discussions and patches can be found in various GitHub issues and Fedora advisories.