Log in Start free

Vulnerability · Published Apr 15, 2022 · Assigned by mitre

CVE-2022-28041

Medium 6.5

In plain English

A medium-severity security flaw in the libstb package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)2.1%top 18.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libstbno fix listedDEBIAN-CVE-2022-28041
Debian:13libstb0.0~git20230129.5736b15+ds-1DEBIAN-CVE-2022-28041
Debian:14libstb0.0~git20230129.5736b15+ds-1DEBIAN-CVE-2022-28041
Ubuntu:22.04:LTSlibstbno fix listedUBUNTU-CVE-2022-28041
Ubuntu:24.04:LTSlibstbno fix listedUBUNTU-CVE-2022-28041
Ubuntu:25.10libstbno fix listedUBUNTU-CVE-2022-28041
Ubuntu:26.04:LTSlibstbno fix listedUBUNTU-CVE-2022-28041
Ubuntu:26.10libstbno fix listedUBUNTU-CVE-2022-28041

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References