ST
Product
stb
26
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 17Medium 8Low 0
Watch
Add stb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45666 | 9.8 | Oct 20 | Possible double-free or memory leak in stbi__load_gif_main in stb_image Affected: <= 2.28 |
| CVE-2026-5317 | 8.8 | Apr 2 | Nothings stb stb_vorbis.c start_decoder out-of-bounds write Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +17 more |
| CVE-2026-5315 | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more |
| CVE-2026-5314 | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more |
| CVE-2025-3409 | 8.8 | Apr 8 | Nothings stb stb_include_string stack-based overflow Affected: f056911 |
| CVE-2025-3408 | 8.8 | Apr 8 | Nothings stb stb_dupreplace integer overflow Affected: f056911 |
| CVE-2025-3407 | 8.8 | Apr 8 | Nothings stb stbhw_build_tileset_from_image out-of-bounds Affected: f056911 |
| CVE-2023-45664 | 8.8 | Oct 20 | Double-free in stbi__load_gif_main_outofmem in stb_image Affected: <= 2.28 |
| CVE-2023-45662 | 8.1 | Oct 20 | Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image Affected: <= 2.28 |
| CVE-2023-45681 | 7.8 | Oct 20 | Out of bounds heap buffer write in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45679 | 7.8 | Oct 20 | Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45678 | 7.8 | Oct 20 | Off-by-one heap buffer write in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45677 | 7.8 | Oct 20 | Heap buffer out of bounds write in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45676 | 7.8 | Oct 20 | Multi-byte write heap buffer overflow in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45675 | 7.8 | Oct 20 | 0 byte write heap buffer overflow in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45667 | 7.5 | Oct 20 | Null pointer dereference because of an uninitialized variable in stb_image Affected: <= 2.28 |
| CVE-2023-45682 | 7.1 | Oct 20 | Wild address read in vorbis_decode_packet_rest in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45661 | 7.1 | Oct 20 | Wild address read in stbi__gif_load_next in stb_image Affected: <= 2.28 |
| CVE-2026-102805 | 6.5 | Sep 30 | Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +11 more |
| CVE-2026-102804 | 6.5 | Sep 30 | Nothings stb stb_hexwave.h hexwave_init integer overflow Affected: 2c980bb59875b0d32144a71867fbdebb2f77cd20 |
| CVE-2026-5316 | 6.5 | Apr 2 | Nothings stb stb_vorbis.c setup_free allocation of resources Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +17 more |
| CVE-2025-3406 | 6.5 | Apr 8 | Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds Affected: f056911 |
| CVE-2023-45680 | 5.5 | Oct 20 | Null pointer dereference in vorbis_deinit in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45663 | 5.5 | Oct 20 | Disclosure of uninitialized memory in stbi__tga_load in stb_image Affected: <= 2.28 |
| CVE-2026-5186 | 5.3 | Mar 31 | Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more |
| CVE-2026-5313 | 4.3 | Apr 1 | Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more |
Showing 26
