CVE:CVE-2022-28042
CNNVD:CNNVD-202204-3466
stb是一款用于C/C ++的单文件公共域库。
nothings stb 2.27版本存在安全漏洞，该漏洞源于文件stb_image.h中的函数stbi__jpeg_huff_decode存在基于堆的释放后重用问题。
solution:Upgrade nothings stb_image.h to a higher version than 2.27,and avoid the version 2.27; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0