Sokol
Monthly
Stack-based buffer overflow in the sokol graphics library's pipeline descriptor defaults function allows a local attacker with low privileges to trigger memory corruption. The vulnerability affects all versions up to commit 16cbcc864012898793cd2bc57f802499a264ea40, and a public exploit is available, though active exploitation has not been confirmed by CISA KEV.
Heap-based buffer overflow in sokol_gfx.h's _sg_pipeline_common_init function allows local authenticated attackers to corrupt memory with low impact on confidentiality, integrity, and availability. Exploitation requires local access and authenticated privileges but no user interaction. Publicly available exploit code exists, though EPSS scoring (0.03%) indicates minimal real-world exploitation probability despite low CVSS score.
Stack-based buffer overflow in the sokol graphics library's pipeline descriptor defaults function allows a local attacker with low privileges to trigger memory corruption. The vulnerability affects all versions up to commit 16cbcc864012898793cd2bc57f802499a264ea40, and a public exploit is available, though active exploitation has not been confirmed by CISA KEV.
Heap-based buffer overflow in sokol_gfx.h's _sg_pipeline_common_init function allows local authenticated attackers to corrupt memory with low impact on confidentiality, integrity, and availability. Exploitation requires local access and authenticated privileges but no user interaction. Publicly available exploit code exists, though EPSS scoring (0.03%) indicates minimal real-world exploitation probability despite low CVSS score.