CVE-2023-43281
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a...
6.5 Medium
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.33%Up 1.3 points since Oct 24, 2023
What each source reports
NVD Score used
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
- Record
CVE-2023-43281- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-415
- Updated
- 2026-11-02
CVE List No score
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
- Record
CVE-2023-43281- Updated
- 2026-11-02
EUVDEUVD-2023-47700 No score
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
- Record
EUVD-2023-47700- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fr72-j747-8gp8
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a...
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
- Record
GHSA-fr72-j747-8gp8- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-415
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-43281
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
- Record
UBUNTU-CVE-2023-43281- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
emscriptenUbuntu:16.04:LTS |
All versions, plus listed versions 1.22.1-1build1 |
None known |
libsfmlUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2+dfsg-1 |
None known |
loveUbuntu:16.04:LTS |
All versions, plus listed versions 0.9.1-3ubuntu1 |
None known |
vispUbuntu:16.04:LTS |
All versions, plus listed versions 2.10.0-4build32.10.0+dfsg-12.10.0+dfsg-1build12.10.0+dfsg-1build22.10.0+dfsg-23.0.0-4 |
None known |
bibleditUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.145-15.0.331-15.0.446-15.0.453-15.0.453-3 |
None known |
emscriptenUbuntu:18.04:LTS |
All versions, plus listed versions 1.22.1-1build1 |
None known |
goxelUbuntu:18.04:LTS |
All versions, plus listed versions 0.7.1-20.7.2-1 |
None known |
libsfmlUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.2+dfsg-4 |
None known |
loveUbuntu:18.04:LTS |
All versions, plus listed versions 0.9.1-4ubuntu1 |
None known |
vispUbuntu:18.04:LTS |
All versions, plus listed versions 3.0.1-2ubuntu23.0.1-2ubuntu43.1.0-2 |
None known |
Show 70 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bibleditUbuntu:20.04:LTS |
All versions, plus listed versions 5.0.764-15.0.764-25.0.807-15.0.808-15.0.811-15.0.811-1build1 |
None known |
bibledit-cloudUbuntu:20.04:LTS |
All versions, plus listed versions 5.0.801-15.0.813-15.0.813-2 |
None known |
goxelUbuntu:20.04:LTS |
All versions, plus listed versions 0.8.1-10.8.1-1build1 |
None known |
libsfmlUbuntu:20.04:LTS |
All versions, plus listed versions 2.5.1+dfsg-12.5.1+dfsg-1build1 |
None known |
libstbUbuntu:20.04:LTS |
All versions, plus listed versions 0.0~git20190817.1.052dce1-1 |
None known |
loveUbuntu:20.04:LTS |
All versions, plus listed versions 11.1-211.3-1 |
None known |
utoxUbuntu:20.04:LTS |
All versions, plus listed versions 0.17.0-1build20.17.1-1 |
None known |
arm-compute-libraryUbuntu:22.04:LTS |
All versions, plus listed versions 20.08+dfsg-5 |
None known |
armnnUbuntu:22.04:LTS |
All versions, plus listed versions 20.08-920.08-1020.08-10build1 |
None known |
bibleditUbuntu:22.04:LTS |
All versions, plus listed versions 5.0.922-15.0.964-15.0.964-25.0.978-15.0.978-1build1 |
None known |
bibledit-cloudUbuntu:22.04:LTS |
All versions, plus listed versions 5.0.922-1build15.0.964-35.0.977-15.0.978-15.0.978-1build1 |
None known |
emscriptenUbuntu:22.04:LTS |
All versions, plus listed versions 2.0.13~dfsg-13.1.1~dfsg+~1.39.6-5ubuntu43.1.2~dfsg+~1.39.6-6ubuntu13.1.3~dfsg-4ubuntu13.1.3~dfsg-5ubuntu13.1.4~dfsg-7ubuntu13.1.5~dfsg-3ubuntu1 |
None known |
goxelUbuntu:22.04:LTS |
All versions, plus listed versions 0.10.6-30.10.8-1 |
None known |
libsfmlUbuntu:22.04:LTS |
All versions, plus listed versions 2.5.1+dfsg-1build12.5.1+dfsg-2 |
None known |
libstbUbuntu:22.04:LTS |
All versions, plus listed versions 0.0~git20200713.b42009b+ds-10.0~git20210910.af1a5bc+ds-1 |
None known |
loveUbuntu:22.04:LTS |
All versions, plus listed versions 11.3-1 |
None known |
timgUbuntu:22.04:LTS |
All versions, plus listed versions 1.4.2-21.4.3-1 |
None known |
utoxUbuntu:22.04:LTS |
All versions, plus listed versions 0.18.1-10.18.1-1build1 |
None known |
vispUbuntu:22.04:LTS |
All versions, plus listed versions 3.4.0-43.4.0-53.4.0-63.5.0-13.5.0-2 |
None known |
arm-compute-libraryUbuntu:24.04:LTS |
All versions, plus listed versions 23.08+dfsg-223.08+dfsg-323.08+dfsg-3.123.08+dfsg-3.1build1 |
None known |
armnnUbuntu:24.04:LTS |
All versions, plus listed versions 23.08-323.08-423.08-4build123.08-4.123.08-4.1build1 |
None known |
bibleditUbuntu:24.04:LTS |
All versions, plus listed versions 5.1.002-15.1.002-1build15.1.002-1build25.1.002-1build45.1.002-1build5 |
None known |
bibledit-cloudUbuntu:24.04:LTS |
All versions, plus listed versions 5.1.005-15.1.005-1build15.1.005-1build25.1.005-1build35.1.005-1build45.1.005-1build5 |
None known |
emscriptenUbuntu:24.04:LTS |
All versions, plus listed versions 3.1.6~dfsg-53.1.6~dfsg-63.1.6~dfsg-7 |
None known |
goxelUbuntu:24.04:LTS |
All versions, plus listed versions 0.11.0-1.10.11.0-1.1build20.11.0-1.1build3 |
None known |
libsfmlUbuntu:24.04:LTS |
All versions, plus listed versions 2.5.1+dfsg-2build12.6.1+dfsg-22.6.1+dfsg-2build12.6.1+dfsg-2build2 |
None known |
libstbUbuntu:24.04:LTS |
All versions, plus listed versions 0.0~git20230129.5736b15+ds-10.0~git20230129.5736b15+ds-1.10.0~git20230129.5736b15+ds-1.2 |
None known |
loveUbuntu:24.04:LTS |
All versions, plus listed versions 11.4-111.5-111.5-1build1 |
None known |
timgUbuntu:24.04:LTS |
All versions, plus listed versions 1.4.5-1build11.5.2-11.5.2-1build11.5.2-1build2 |
None known |
tiny-dnnUbuntu:24.04:LTS |
All versions, plus listed versions 1.0.0a3+ds-31.0.0a3+ds-4 |
None known |
utoxUbuntu:24.04:LTS |
All versions, plus listed versions 0.18.1-1build10.18.1-1build20.18.1-1build4 |
None known |
vispUbuntu:24.04:LTS |
All versions, plus listed versions 3.5.0-43.6.0-23.6.0-2.1build23.6.0-2.1build3 |
None known |
arm-compute-libraryUbuntu:25.10 |
All versions, plus listed versions 23.08+dfsg-3.1build124.11+dfsg-3 |
None known |
armnnUbuntu:25.10 |
All versions, plus listed versions 23.08-5 |
None known |
bibleditUbuntu:25.10 |
All versions, plus listed versions 5.1.023-1build15.1.023-1build2 |
None known |
bibledit-cloudUbuntu:25.10 |
All versions, plus listed versions 5.1.023-15.1.023-1build1 |
None known |
emscriptenUbuntu:25.10 |
All versions, plus listed versions 3.1.69+dfsg-13.1.69+dfsg-3 |
None known |
goxelUbuntu:25.10 |
All versions, plus listed versions 0.11.0-1.1build3 |
None known |
libsfmlUbuntu:25.10 |
All versions, plus listed versions 2.6.2+dfsg-2build1 |
None known |
libstbUbuntu:25.10 |
All versions, plus listed versions 0.0~git20240715.f7f20f39fe4f+ds-10.0~git20241109.5c20573+ds-1 |
None known |
loveUbuntu:25.10 |
All versions, plus listed versions 11.5-2 |
None known |
timgUbuntu:25.10 |
All versions, plus listed versions 1.6.0-1build2 |
None known |
tiny-dnnUbuntu:25.10 |
All versions, plus listed versions 1.0.0a3+ds-41.0.0a3+ds-5 |
None known |
utoxUbuntu:25.10 |
All versions, plus listed versions 0.18.1-1build4 |
None known |
vispUbuntu:25.10 |
All versions, plus listed versions 3.6.0-53.6.0-5build1 |
None known |
arm-compute-libraryUbuntu:26.10 |
All versions, plus listed versions 24.11+dfsg-3build1 |
None known |
armnnUbuntu:26.10 |
All versions, plus listed versions 23.08-5.1 |
None known |
bibleditUbuntu:26.10 |
All versions, plus listed versions 5.1.036-15.1.047-15.1.055-35.1.058-1 |
None known |
bibledit-cloudUbuntu:26.10 |
All versions, plus listed versions 5.1.036-15.1.047-15.1.053-15.1.053-25.1.053-45.1.053-5 |
None known |
emscriptenUbuntu:26.10 |
All versions, plus listed versions 3.1.69+dfsg-46.0.5+dfsg+~1.41.5-2 |
None known |
goxelUbuntu:26.10 |
All versions, plus listed versions 0.11.0-1.1build40.15.1-1ubuntu1 |
None known |
libsfmlUbuntu:26.10 |
All versions, plus listed versions 3.0.2+dfsg-23.1.0+dfsg-33.1.0+dfsg-4 |
None known |
libstbUbuntu:26.10 |
All versions, plus listed versions 0.0~git20250907.fede005+ds-1 |
None known |
loveUbuntu:26.10 |
All versions, plus listed versions 11.5-311.5-4 |
None known |
timgUbuntu:26.10 |
All versions, plus listed versions 1.6.3-1build1 |
None known |
tiny-dnnUbuntu:26.10 |
All versions, plus listed versions 1.0.0a3+ds-6 |
None known |
utoxUbuntu:26.10 |
All versions, plus listed versions 0.18.1-1.1 |
None known |
vispUbuntu:26.10 |
All versions, plus listed versions 3.7.0-103.7.0-163.7.0-173.7.0-17build1 |
None known |
arm-compute-libraryUbuntu:26.04:LTS |
All versions, plus listed versions 24.11+dfsg-324.11+dfsg-3build1 |
None known |
bibleditUbuntu:26.04:LTS |
All versions, plus listed versions 5.1.023-1build25.1.023-1build35.1.036-1 |
None known |
bibledit-cloudUbuntu:26.04:LTS |
All versions, plus listed versions 5.1.023-1build15.1.034-25.1.034-2build15.1.036-1 |
None known |
emscriptenUbuntu:26.04:LTS |
All versions, plus listed versions 3.1.69+dfsg-33.1.69+dfsg-4 |
None known |
goxelUbuntu:26.04:LTS |
All versions, plus listed versions 0.11.0-1.1build30.11.0-1.1build4 |
None known |
libsfmlUbuntu:26.04:LTS |
All versions, plus listed versions 2.6.2+dfsg-2build13.0.2+dfsg-13.0.2+dfsg-2 |
None known |
libstbUbuntu:26.04:LTS |
All versions, plus listed versions 0.0~git20241109.5c20573+ds-10.0~git20250907.fede005+ds-1 |
None known |
loveUbuntu:26.04:LTS |
All versions, plus listed versions 11.5-211.5-2build111.5-3 |
None known |
timgUbuntu:26.04:LTS |
All versions, plus listed versions 1.6.0-1build21.6.3-11.6.3-1build1 |
None known |
tiny-dnnUbuntu:26.04:LTS |
All versions, plus listed versions 1.0.0a3+ds-51.0.0a3+ds-6 |
None known |
utoxUbuntu:26.04:LTS |
All versions, plus listed versions 0.18.1-1build40.18.1-1build50.18.1-1ubuntu10.18.1-1.1 |
None known |
vispUbuntu:26.04:LTS |
All versions, plus listed versions 3.6.0-5build13.6.0-5build23.7.0-10 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-43281 is a medium vulnerability (CVSS 6.5) in Nothings Stb Image.h, published October 24, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.33%, the 71st percentile. No source names a fixed version.
References
gist.github.com/peccc/d8761f6ac45ad55cbd194dd7e6fdfdac
github.com/peccc/double-stb
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR
nvd.nist.gov/vuln/detail/CVE-2023-43281
Show 6 moreShow less
ubuntu.com/security/CVE-2023-43281
cve.org/CVERecord?id=CVE-2023-43281