Vulnerability index

Browse CVEs

36 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Stb Vorbis.c HIGH 8.8
CVE-2026-5317

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation re…

Fix: after 1.22
Fix from $1,950 2026-04-02
Stb Truetype.h HIGH 8.8
CVE-2026-5315

A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbtt__buf_get8 in the library stb_truetype.h of the …

Fix: after 1.26
Fix from $1,950 2026-04-02
Stb Vorbis.c MEDIUM 6.5
CVE-2026-5316

A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setup_free of the file stb_vorbis.c. The manipulation…

Fix: after 1.22
Fix from $1,600 2026-04-02
Stb Truetype.h HIGH 8.8
CVE-2026-5314

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component…

Fix: after 1.26
Fix from $1,950 2026-04-01
Stb Image.h HIGH 8.8
CVE-2025-3409

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation o…

Fix: after 2.13
Fix from $1,950 2025-04-08
Stb Image.h HIGH 8.8
CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stb_dupreplace. The ma…

Fix: after 2.13
Fix from $1,950 2025-04-08
Stb Image.h HIGH 8.8
CVE-2025-3407

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhw_build…

Fix: after 2.13
Fix from $1,950 2025-04-08
Stb Image.h MEDIUM 6.5
CVE-2025-3406

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhw_build_tileset_from_ima…

Fix: after 2.13
Fix from $1,600 2025-04-08
Stb Image.h MEDIUM 6.5
CVE-2023-43281

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gi…

No fix yet
Fix from $1,600 2023-10-25
Stb Image.h CRITICAL 9.8
CVE-2023-45666

stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the cont…

Mitigation only
Fix from $2,300 2023-10-21
Stb Image.h HIGH 8.8
CVE-2023-45664

stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to dou…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45675

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45676

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = g…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45677

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45678

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` b…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45679

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45681

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buff…

Mitigation only
Fix from $1,950 2023-10-21
Stb Image.h HIGH 7.5
CVE-2023-45667

stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a nu…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.1
CVE-2023-45682

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro whe…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c MEDIUM 5.5
CVE-2023-45680

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco…

Mitigation only
Fix from $1,600 2023-10-21
Stb Image.h HIGH 8.1
CVE-2023-45662

stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set…

Mitigation only
Fix from $1,950 2023-10-21
Stb Image.h HIGH 7.1
CVE-2023-45661

stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_…

Patch available
Fix from $1,950 2023-10-21
Stb Image.h MEDIUM 5.5
CVE-2023-45663

stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typica…

Mitigation only
Fix from $1,600 2023-10-21
Stb Image.h MEDIUM 5.5
CVE-2023-43898

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to …

Patch available
Fix from $1,600 2023-10-03
Stb Truetype.h MEDIUM 6.5
CVE-2022-25515

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed st…

No fix yet
Fix from $1,600 2022-03-17
Stb Truetype.h MEDIUM 6.5
CVE-2022-25516

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has dis…

No fix yet
Fix from $1,600 2022-03-17
Stb Truetype.h HIGH 7.5
CVE-2022-25514

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed s…

No fix yet
Fix from $1,950 2022-03-17
Stb Truetype.h HIGH 8.8
CVE-2020-6617

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.

Fix: after 1.22
Fix from $1,950 2020-01-08
Stb Truetype.h HIGH 8.8
CVE-2020-6618

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.

Fix: after 1.22
Fix from $1,950 2020-01-08
Stb Truetype.h HIGH 8.8
CVE-2020-6619

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.

Fix: after 1.22
Fix from $1,950 2020-01-08