Buffer overflow vulnerability in function stbi_extendreceive in stb_image.h in stb 2.26 via a crafted JPEG file.