CVE-2021-42715

5.5

MEDIUMCVSS v3

Published

October 21, 2021

CVSS v2

4.3 MEDIUM

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files.