GHSA-ppjr-267j-5p9x
NULL pointer derefernce in `stb_image`
GHSA-ppjr-267j-5p9x is a vulnerability with no CVSS score yet in stb_image, published March 19, 2023. No source lists public exploit code. Fixed in stb_image 0.2.5.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.2.5stb_image +1 more
Description
A bug in error handling in the stb_image C library could cause a NULL pointer dereference when attempting to load an invalid or unsupported image file. This is fixed in version 0.2.5 and later of the stb_image Rust crate, by patching the C code to correctly handle NULL pointers.
Affected packages
What each source reports
GitHub AdvisoriesNo score
NULL pointer derefernce in `stb_image`
A bug in error handling in the stb_image C library could cause a NULL pointer dereference when attempting to load an invalid or unsupported image file. This is fixed in version 0.2.5 and later of the stb_image Rust crate, by patching the C code to correctly handle NULL pointers.
- Record
GHSA-ppjr-267j-5p9x- Weakness
- CWE-476
- Updated
- 2026-11-02
OSVNo score
NULL pointer derefernce in `stb_image`
A bug in error handling in the stb_image C library could cause a NULL pointer dereference when attempting to load an invalid or unsupported image file. This is fixed in version 0.2.5 and later of the stb_image Rust crate, by patching the C code to correctly handle NULL pointers.
- Record
GHSA-ppjr-267j-5p9x- Weakness
- CWE-476
- Updated
- 2026-11-02
OSVRUSTSEC-2023-0021No score
NULL pointer dereference in `stb_image`
A bug in error handling in the stb_image C library could cause a NULL pointer dereference when attempting to load an invalid or unsupported image file. This is fixed in version 0.2.5 and later of the stb_image Rust crate, by patching the C code to correctly handle NULL pointers.
Thank you to GitHub user 0xdd96 for finding and fixing this vulnerability.
- Record
RUSTSEC-2023-0021- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.