Skip to main content

Stb Image H

19 CVEs product

Monthly

CVE-2025-3409 Apr 08, 05:15 MEDIUM This Month

A vulnerability classified as critical has been found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3408 Apr 08, 04:15 MEDIUM This Month

A vulnerability was found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3407 Apr 08, 04:15 MEDIUM This Month

A vulnerability was found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3406 Apr 08, 04:15 MEDIUM This Month

A vulnerability was found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2023-43281 Oct 25, 18:17 MEDIUM POC This Month

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Stb Image H Nothings
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2023-45667 Oct 21, 00:15 HIGH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Stb Image H Nothings
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2023-45666 Oct 21, 00:15 CRITICAL Act Now

stb_image is a single file MIT licensed library for processing images. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Stb Image H Nothings
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-45664 Oct 21, 00:15 HIGH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Stb Image H Nothings
NVD GitHub
CVSS 3.1
8.8
EPSS
0.9%
CVE-2023-45663 Oct 21, 00:15 MEDIUM This Month

stb_image is a single file MIT licensed library for processing images. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Stb Image H Nothings
NVD GitHub
CVSS 3.1
5.5
EPSS
0.7%
CVE-2023-45662 Oct 21, 00:15 HIGH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Stb Image H Nothings
NVD GitHub
CVSS 3.1
8.1
EPSS
0.7%
CVE-2023-45661 Oct 21, 00:15 HIGH PATCH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Stb Image H Nothings
NVD GitHub
CVSS 3.1
7.1
EPSS
0.6%
CVE-2023-43898 Oct 03, 21:15 MEDIUM POC PATCH This Month

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Null Pointer Dereference Stb Image H Nothings
NVD GitHub
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-28042 Apr 15, 14:15 HIGH POC PATCH This Week

stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Use After Free Memory Corruption Debian Debian Linux +4
NVD GitHub
CVSS 3.1
8.8
EPSS
1.6%
CVE-2022-28041 Apr 15, 14:15 MEDIUM POC PATCH This Month

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Integer Overflow Debian Debian Linux Fedora +3
NVD GitHub
CVSS 3.1
6.5
EPSS
2.1%
CVE-2021-42716 Oct 21, 19:15 HIGH POC This Week

An issue was discovered in stb stb_image.h 2.27. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Fedora Stb Image H Fedoraproject Nothings
NVD GitHub
CVSS 3.1
7.1
EPSS
1.4%
CVE-2021-42715 Oct 21, 19:15 MEDIUM This Month

An issue was discovered in stb stb_image.h 1.33 through 2.27. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Debian Debian Linux Fedora Stb Image H +2
NVD GitHub
CVSS 3.1
5.5
EPSS
1.2%
CVE-2019-20056 Dec 29, 19:15 MEDIUM POC This Month

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Stb Image H Nothings
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2019-19777 Dec 13, 02:15 HIGH POC This Week

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Libsixel Stb Image H Nothings +1
NVD GitHub
CVSS 3.1
8.8
EPSS
0.4%
CVE-2018-16981 Sep 12, 23:29 HIGH POC This Week

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian Debian Linux Stb Image H +1
NVD GitHub
CVSS 3.1
8.8
EPSS
1.6%
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as critical has been found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in Nothings stb up to f056911. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stb Image H Nothings
NVD VulDB
EPSS 1% CVSS 6.5
MEDIUM POC This Month

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Stb Image H Nothings
NVD GitHub
EPSS 1% CVSS 7.5
HIGH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Stb Image H +1
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL Act Now

stb_image is a single file MIT licensed library for processing images. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Stb Image H Nothings
NVD GitHub
EPSS 1% CVSS 8.8
HIGH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Stb Image H Nothings
NVD GitHub
EPSS 1% CVSS 5.5
MEDIUM This Month

stb_image is a single file MIT licensed library for processing images. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Stb Image H Nothings
NVD GitHub
EPSS 1% CVSS 8.1
HIGH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Stb Image H +1
NVD GitHub
EPSS 1% CVSS 7.1
HIGH PATCH This Week

stb_image is a single file MIT licensed library for processing images. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Stb Image H +1
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM POC PATCH This Month

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Null Pointer Dereference Stb Image H +1
NVD GitHub
EPSS 2% CVSS 8.8
HIGH POC PATCH This Week

stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Use After Free Memory Corruption +6
NVD GitHub
EPSS 2% CVSS 6.5
MEDIUM POC PATCH This Month

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Integer Overflow Debian +5
NVD GitHub
EPSS 1% CVSS 7.1
HIGH POC This Week

An issue was discovered in stb stb_image.h 2.27. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Fedora Stb Image H +2
NVD GitHub
EPSS 1% CVSS 5.5
MEDIUM This Month

An issue was discovered in stb stb_image.h 1.33 through 2.27. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Debian Debian Linux +4
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC This Month

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Stb Image H Nothings
NVD GitHub
EPSS 0% CVSS 8.8
HIGH POC This Week

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Libsixel +3
NVD GitHub
EPSS 2% CVSS 8.8
HIGH POC This Week

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian +3
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy