Browse CVEs

MEDIUM 6.5 CVE-2023-43281 Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gi… Stb Image.h No fix yet Fix from $1,6002023-10-25 CRITICAL 9.8 CVE-2023-45666 stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the cont… Stb Image.h Mitigation only Fix from $2,3002023-10-21 HIGH 8.8 CVE-2023-45664 stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to dou… Stb Image.h Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45675 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45676 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = g… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45677 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45678 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` b… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45679 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45681 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buff… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.5 CVE-2023-45667 stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a nu… Stb Image.h Mitigation only Fix from $1,9502023-10-21 HIGH 7.1 CVE-2023-45682 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro whe… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 MEDIUM 5.5 CVE-2023-45680 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco… Stb Vorbis.c Mitigation only Fix from $1,6002023-10-21 HIGH 8.1 CVE-2023-45662 stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set… Stb Image.h Mitigation only Fix from $1,9502023-10-21 MEDIUM 5.5 CVE-2023-45663 stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typica… Stb Image.h Mitigation only Fix from $1,6002023-10-21 MEDIUM 6.5 CVE-2022-25515 stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed st… Stb Truetype.h No fix yet Fix from $1,6002022-03-17 MEDIUM 6.5 CVE-2022-25516 stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has dis… Stb Truetype.h No fix yet Fix from $1,6002022-03-17 HIGH 7.5 CVE-2022-25514 stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed s… Stb Truetype.h No fix yet Fix from $1,9502022-03-17 MEDIUM 6.5 CVE-2019-20056 stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. Stb Image.h No fix yet Fix from $1,6002019-12-29 HIGH 8.8 CVE-2019-19777 stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main. Stb Image.h No fix yet Fix from $1,9502019-12-13