CVE-2022-28048: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Stb Project Stb: version 2.27 only

Published 2022-04-15. Last modified 2026-06-17.