CVE-2021-28021

CVE-2021-28021 is a buffer overflow in stb_image.h (stb 2.26) inside the function stbi__extend_receive triggered by a crafted JPEG file. Connected advisories confirm affected libraries libstb/stb and related packages across multiple distros (Debian, Gentoo, SUSE, Nessus plugins). Impact per sourc...

CVE-2021-28021

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file...

PT-2021-7979 · Unknown +3 · Stb Image.H +3

Name of the Vulnerable Software and Affected Versions: stb image.h versions 1.33 through 2.27 Description: The issue is related to the HDR loader in stb image.h, which parses truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. This could allow a remote attacker to cau...

PT-2021-7967 · Unknown +2 · Stb Image.H +2

Name of the Vulnerable Software and Affected Versions: stb image.h version 2.27 Description: The issue is related to a heap-based buffer overflow in the stbi jpeg load function of the stb image.h library, which can lead to Information Disclosure or Denial of Service. This can be exploited by a...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

Improper access control

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

CVE-2021-21737

CVE-2021-21737 affects ZTE ZXV10 B860H family STBs (V5.0, V83011303.0010, V83011303.0016). The issue is a permission/access control vulnerability due to insufficient protection of system applications, enabling an attacker to tamper with the system desktop and affect system customization. No explo...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

PT-2021-7754 · Stb +3 · Stb +3

Name of the Vulnerable Software and Affected Versions: stb versions 2.26 Description: The issue is related to a buffer overflow vulnerability in the stbi extend receive function of the stb image.h component in the stb library for C/C++. This vulnerability can be exploited by a remote attacker usi...

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

Information disclosure

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722

The CVE-2021-21722 entry concerns a ZTE ZXV10 B860A Smart Set-Top Box information disclosure vulnerability. According to the sources, the issue arises because the device does not fully verify logs, enabling attackers to obtain sensitive user information for follow-on activity. Affected firmware/v...

stb-linz.de Cross Site Scripting vulnerability OBB-1434377

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__compute_transparency16

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=6193806570684416 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__expand_png_palette

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=4908103769522176 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__tga_load

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5114711032201216 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x602000000091 Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5720549589516288 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62a000005fcf...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__jpeg_huff_decode

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=6243539368542208 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...