CVE:CVE-2022-28048
CNNVD:CNNVD-202204-3463
stb是一款用于C/C ++的单文件公共域库。
stb v2.27 版本存在安全漏洞，该漏洞源于在组件 stbi__jpeg_decode_block_prog_ac 中包含无效大小的整数移位。
solution:Upgrade stb_project stb to a higher version than 2.27,and avoid the version 2.27; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36