Astra Linux – Vulnerability in libstb

It was discovered that Nothings stb 2.28 contains a Null Pointer Dereference issue through the stbiconvertformat function. This vulnerability allows attackers to cause a Denial of Service DoS attack using a specially crafted PIC file...

The vulnerability of the stbi__convert_format function in the C/C++ Libstb libraries allows a hacker to cause a service failure.

The vulnerability of the stbiconvertformat function in the C/C++ Libstb library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created pic file...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the stbiconvertformat function via the stbimage.h component. An attacker can cause a crash and denial of service by loading a specially crafted invalid PICT file. Remediation A fix was pushed into the master...