Vulnerability index

Browse CVEs

19 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Stb Image.h MEDIUM 6.5
CVE-2023-43281

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gi…

No fix yet
Fix from $1,600 2023-10-25
Stb Image.h CRITICAL 9.8
CVE-2023-45666

stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the cont…

Mitigation only
Fix from $2,300 2023-10-21
Stb Image.h HIGH 8.8
CVE-2023-45664

stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to dou…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45675

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45676

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = g…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45677

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45678

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` b…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45679

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.8
CVE-2023-45681

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buff…

Mitigation only
Fix from $1,950 2023-10-21
Stb Image.h HIGH 7.5
CVE-2023-45667

stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a nu…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c HIGH 7.1
CVE-2023-45682

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro whe…

Mitigation only
Fix from $1,950 2023-10-21
Stb Vorbis.c MEDIUM 5.5
CVE-2023-45680

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco…

Mitigation only
Fix from $1,600 2023-10-21
Stb Image.h HIGH 8.1
CVE-2023-45662

stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set…

Mitigation only
Fix from $1,950 2023-10-21
Stb Image.h MEDIUM 5.5
CVE-2023-45663

stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typica…

Mitigation only
Fix from $1,600 2023-10-21
Stb Truetype.h MEDIUM 6.5
CVE-2022-25515

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed st…

No fix yet
Fix from $1,600 2022-03-17
Stb Truetype.h MEDIUM 6.5
CVE-2022-25516

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has dis…

No fix yet
Fix from $1,600 2022-03-17
Stb Truetype.h HIGH 7.5
CVE-2022-25514

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed s…

No fix yet
Fix from $1,950 2022-03-17
Stb Image.h MEDIUM 6.5
CVE-2019-20056

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.

No fix yet
Fix from $1,600 2019-12-29
Stb Image.h HIGH 8.8
CVE-2019-19777

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.

No fix yet
Fix from $1,950 2019-12-13