Skip to main content

Raylib

3 CVEs product

Monthly

CVE-2025-15534 Jan 18, 07:16 LOW POC PATCH Monitor

A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. [CVSS 5.3 MEDIUM]

Buffer Overflow Raylib
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-15533 Jan 18, 05:16 LOW POC PATCH Monitor

A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. [CVSS 5.3 MEDIUM]

Buffer Overflow Raylib
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2023-26123 Apr 14, 05:15 MEDIUM POC PATCH This Month

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not properly escape the ' character, allowing. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Raylib
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
EPSS 0% CVSS 1.9
LOW POC PATCH Monitor

A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. [CVSS 5.3 MEDIUM]

Buffer Overflow Raylib
NVD GitHub VulDB
EPSS 0% CVSS 1.9
LOW POC PATCH Monitor

A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. [CVSS 5.3 MEDIUM]

Buffer Overflow Raylib
NVD GitHub VulDB
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not properly escape the ' character, allowing. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Raylib
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy