High severity7.8NVD Advisory· Published Oct 15, 2021· Updated Jun 17, 2026

CVE-2021-28021

Description

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

LLM-synthesized narrative grounded in this CVE's description and references.

Stb Project/Stb
cpe:2.3:a:stb_project:stb:2.26:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
stb/stbdescription
Stb/stb_image.hllm-fuzzy
Range: =2.26
osv-coords5 versions
pkg:rpm/opensuse/zxing-cpp&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/zxing-cpp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3 pkg:rpm/suse/zxing-cpp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/zxing-cpp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/zxing-cpp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP3
< 1.2.0-9.7.1+ 4 more
- (no CPE)range: < 1.2.0-9.7.1
- (no CPE)range: < 1.2.0-9.7.1
- (no CPE)range: < 1.2.0-8.6.1
- (no CPE)range: < 1.2.0-8.6.1
- (no CPE)range: < 1.2.0-9.7.1