Browse CVEs

HIGH 8.8 CVE-2026-5317 A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation re… Stb Vorbis.c after 1.22 Fix from $1,9502026-04-02 HIGH 8.8 CVE-2026-5315 A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbtt__buf_get8 in the library stb_truetype.h of the … Stb Truetype.h after 1.26 Fix from $1,9502026-04-02 MEDIUM 6.5 CVE-2026-5316 A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setup_free of the file stb_vorbis.c. The manipulation… Stb Vorbis.c after 1.22 Fix from $1,6002026-04-02 HIGH 8.8 CVE-2026-5314 A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component… Stb Truetype.h after 1.26 Fix from $1,9502026-04-01 HIGH 8.8 CVE-2025-3409 A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation o… Stb Image.h after 2.13 Fix from $1,9502025-04-08 HIGH 8.8 CVE-2025-3408 A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stb_dupreplace. The ma… Stb Image.h after 2.13 Fix from $1,9502025-04-08 HIGH 8.8 CVE-2025-3407 A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhw_build… Stb Image.h after 2.13 Fix from $1,9502025-04-08 MEDIUM 6.5 CVE-2025-3406 A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhw_build_tileset_from_ima… Stb Image.h after 2.13 Fix from $1,6002025-04-08 MEDIUM 6.5 CVE-2023-43281 Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gi… Stb Image.h No fix yet Fix from $1,6002023-10-25 CRITICAL 9.8 CVE-2023-45666 stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the cont… Stb Image.h Mitigation only Fix from $2,3002023-10-21 HIGH 8.8 CVE-2023-45664 stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to dou… Stb Image.h Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45675 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45676 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = g… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45677 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] =… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45678 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` b… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45679 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-45681 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buff… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.5 CVE-2023-45667 stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a nu… Stb Image.h Mitigation only Fix from $1,9502023-10-21 HIGH 7.1 CVE-2023-45682 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro whe… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 MEDIUM 5.5 CVE-2023-45680 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_deco… Stb Vorbis.c Mitigation only Fix from $1,6002023-10-21 HIGH 8.1 CVE-2023-45662 stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set… Stb Image.h Mitigation only Fix from $1,9502023-10-21 HIGH 7.1 CVE-2023-45661 stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_… Stb Image.h Patch available Fix from $1,9502023-10-21 MEDIUM 5.5 CVE-2023-45663 stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typica… Stb Image.h Mitigation only Fix from $1,6002023-10-21 MEDIUM 5.5 CVE-2023-43898 Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to … Stb Image.h Patch available Fix from $1,6002023-10-03 MEDIUM 6.5 CVE-2022-25515 stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed st… Stb Truetype.h No fix yet Fix from $1,6002022-03-17 MEDIUM 6.5 CVE-2022-25516 stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has dis… Stb Truetype.h No fix yet Fix from $1,6002022-03-17 HIGH 7.5 CVE-2022-25514 stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed s… Stb Truetype.h No fix yet Fix from $1,9502022-03-17 HIGH 8.8 CVE-2020-6617 stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-6618 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-6619 stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08