CVE:CVE-2021-28021
CNNVD:CNNVD-202110-1205
stb是一款用于C/C ++的单文件公共域库。
stb 2.26版本存在缓冲区错误漏洞，该漏洞源于软件中的stb_image.h文件的stbi_extend_receive函数存在缓冲区溢出漏洞 。攻击者可以通过一个精心制作的JPEG文件来触发漏洞。
solution:Upgrade stb_project stb to a higher version than 2.26,and avoid the version 2.26; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0