Nothings Stb vulnerabilities

• nothings stb Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow CVE-2026-102805 6.9 MediumSeptember 30, 2026
• nothings stb Nothings stb stb_hexwave.h hexwave_init integer overflow CVE-2026-102804 6.9 MediumSeptember 30, 2026
• nothings stb vorbis stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands CVE-2026-89266 8.8 HighSeptember 11, 2026
• nothings stb, stb vorbis.c +1 more Nothings stb stb_vorbis.c start_decoder out-of-bounds write CVE-2026-5317 5.3 MediumApril 2, 2026
• nothings stb, stb vorbis.c +1 more Nothings stb stb_vorbis.c setup_free allocation of resources CVE-2026-5316 5.3 MediumApril 2, 2026
• nothings stb, stb truetype.h +1 more Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds CVE-2026-5315 5.3 MediumApril 1, 2026
• nothings stb, stb truetype.h +1 more Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds CVE-2026-5314 5.3 MediumApril 1, 2026
• nothings stb Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service CVE-2026-5313 5.3 MediumApril 1, 2026
• nothings stb Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free CVE-2026-5186 4.8 MediumMarch 31, 2026
• nothings stb image Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow CVE-2026-5185 4.8 MediumMarch 31, 2026
• nothings stb, stb image.h +1 more Nothings stb stb_include_string stack-based overflow CVE-2025-3409 5.3 MediumApril 8, 2025
• nothings stb, stb image.h +1 more Nothings stb stb_dupreplace integer overflow CVE-2025-3408 5.3 MediumApril 8, 2025
• nothings stb, stb image.h +1 more Nothings stb stbhw_build_tileset_from_image out-of-bounds CVE-2025-3407 5.3 MediumApril 8, 2025
• nothings stb, stb image.h +1 more Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds CVE-2025-3406 5.3 MediumApril 8, 2025
• stb vorbis.c, stb vorbis project vorbis, fedoraproject fedora +1 more +3 more A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c... CVE-2023-47212 9.8 CriticalMay 1, 2024
• nothings stb image.h Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a... CVE-2023-43281 6.5 MediumOctober 24, 2023
• nothings stb, stb vorbis.c +1 more Wild address read in vorbis_decode_packet_rest in stb_vorbis CVE-2023-45682 5.3 MediumOctober 20, 2023
• nothings stb, stb vorbis.c +1 more Out of bounds heap buffer write in stb_vorbis CVE-2023-45681 7.3 HighOctober 20, 2023
• nothings stb, stb vorbis.c +1 more Null pointer dereference in vorbis_deinit in stb_vorbis CVE-2023-45680 5.3 MediumOctober 20, 2023
• nothings stb, stb vorbis.c +1 more Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis CVE-2023-45679 7.3 HighOctober 20, 2023
• nothings stb, stb vorbis.c +1 more Off-by-one heap buffer write in start_decoder in stb_vorbis CVE-2023-45678 6.5 MediumOctober 20, 2023
• nothings stb, stb vorbis.c +1 more Heap buffer out of bounds write in start_decoder in stb_vorbis CVE-2023-45677 7.3 HighOctober 20, 2023
• nothings stb, stb vorbis.c +1 more Multi-byte write heap buffer overflow in start_decoder in stb_vorbis CVE-2023-45676 7.3 HighOctober 20, 2023
• nothings stb, stb vorbis.c +1 more 0 byte write heap buffer overflow in start_decoder in stb_vorbis CVE-2023-45675 Fix available 6.5 MediumOctober 20, 2023
• nothings stb, stb image, stb image.h +2 more Null pointer dereference because of an uninitialized variable in stb_image CVE-2023-45667 Fix available 5.3 MediumOctober 20, 2023
• nothings stb, stb image, stb image.h +2 more Possible double-free or memory leak in stbi__load_gif_main in stb_image CVE-2023-45666 Fix available 7.3 HighOctober 20, 2023
• nothings stb, stb image, stb image.h +2 more Double-free in stbi__load_gif_main_outofmem in stb_image CVE-2023-45664 Fix available 7.3 HighOctober 20, 2023
• nothings stb, stb image, stb image.h +2 more Disclosure of uninitialized memory in stbi__tga_load in stb_image CVE-2023-45663 Fix available 5.3 MediumOctober 20, 2023
• nothings stb, stb image, stb image.h +2 more Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image CVE-2023-45662 Fix available 6.5 MediumOctober 20, 2023
• nothings stb, stb image, stb image.h +2 more Wild address read in stbi__gif_load_next in stb_image CVE-2023-45661 Fix available 6.5 MediumOctober 20, 2023
• nothings stb image.h Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function... CVE-2023-43898 Fix available 5.5 MediumOctober 3, 2023
• debian linux, fedoraproject fedora, nothings stb image.h +2 more stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function... CVE-2022-28042 Fix available 8.8 HighApril 15, 2022
• debian linux, fedoraproject fedora, nothings stb image.h +2 more stb_image.h v2.27 was discovered to contain an integer overflow via the function... CVE-2022-28041 Fix available 6.5 MediumApril 15, 2022
• nothings stb truetype.h stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function... CVE-2022-25516 Disputed 6.5 MediumMarch 17, 2022
• nothings stb truetype.h stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG()... CVE-2022-25515 Disputed 6.5 MediumMarch 17, 2022
• nothings stb truetype.h stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT()... CVE-2022-25514 Disputed 7.5 HighMarch 17, 2022
• fedoraproject fedora, nothings stb image.h +1 more An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit... CVE-2021-42716 Fix available 7.1 HighOctober 21, 2021
• debian linux, fedoraproject fedora, nothings stb image.h +2 more An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end... CVE-2021-42715 Fix available 5.5 MediumOctober 21, 2021
• nothings stb truetype.h stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. CVE-2020-6617 8.8 HighJanuary 8, 2020
• nothings stb truetype.h stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. CVE-2020-6618 8.8 HighJanuary 8, 2020
• nothings stb truetype.h stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. CVE-2020-6619 8.8 HighJanuary 8, 2020
• nothings stb truetype.h stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. CVE-2020-6620 8.8 HighJanuary 8, 2020
• nothings stb truetype.h stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. CVE-2020-6621 8.8 HighJanuary 8, 2020
• nothings stb truetype.h stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. CVE-2020-6622 8.8 HighJanuary 8, 2020
• nothings stb truetype.h stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. CVE-2020-6623 8.8 HighJanuary 8, 2020
• nothings stb image.h stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an... CVE-2019-20056 Fix available 6.5 MediumDecember 29, 2019
• saitoha libsixel, nothings stb image.h +1 more stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap... CVE-2019-19777 Fix available 8.8 HighDecember 13, 2019
• debian linux, nothings stb image.h +1 more stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer... CVE-2018-16981 Fix available 8.8 HighSeptember 12, 2018