STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi_jpegdecodeblockprog_ac.
{ "ubuntu_priority": "medium" }