ST
Product
stb
by nothings · last CVE Sep 30, 2026
26
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 17Medium 8Low 0
Watch

Add stb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-45666
9.8
1%
Oct 20
Possible double-free or memory leak in stbi__load_gif_main in stb_image
Affected: <= 2.28
CVE-2026-5317
8.8
0%
Apr 2
Nothings stb stb_vorbis.c start_decoder out-of-bounds write
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +17 more
CVE-2026-5315
8.8
1%
Apr 1
Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more
CVE-2026-5314
8.8
1%
Apr 1
Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more
CVE-2025-3409
8.8
1%
Apr 8
Nothings stb stb_include_string stack-based overflow
Affected: f056911
CVE-2025-3408
8.8
0%
Apr 8
Nothings stb stb_dupreplace integer overflow
Affected: f056911
CVE-2025-3407
8.8
0%
Apr 8
Nothings stb stbhw_build_tileset_from_image out-of-bounds
Affected: f056911
CVE-2023-45664
8.8
1%
Oct 20
Double-free in stbi__load_gif_main_outofmem in stb_image
Affected: <= 2.28
CVE-2023-45662
8.1
1%
Oct 20
Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image
Affected: <= 2.28
CVE-2023-45681
7.8
1%
Oct 20
Out of bounds heap buffer write in stb_vorbis
Affected: <= 1.22
CVE-2023-45679
7.8
1%
Oct 20
Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis
Affected: <= 1.22
CVE-2023-45678
7.8
1%
Oct 20
Off-by-one heap buffer write in start_decoder in stb_vorbis
Affected: <= 1.22
CVE-2023-45677
7.8
1%
Oct 20
Heap buffer out of bounds write in start_decoder in stb_vorbis
Affected: <= 1.22
CVE-2023-45676
7.8
1%
Oct 20
Multi-byte write heap buffer overflow in start_decoder in stb_vorbis
Affected: <= 1.22
CVE-2023-45675
7.8
1%
Oct 20
0 byte write heap buffer overflow in start_decoder in stb_vorbis
Affected: <= 1.22
CVE-2023-45667
7.5
1%
Oct 20
Null pointer dereference because of an uninitialized variable in stb_image
Affected: <= 2.28
CVE-2023-45682
7.1
1%
Oct 20
Wild address read in vorbis_decode_packet_rest in stb_vorbis
Affected: <= 1.22
CVE-2023-45661
7.1
1%
Oct 20
Wild address read in stbi__gif_load_next in stb_image
Affected: <= 2.28
CVE-2026-102805
6.5
0%
Sep 30
Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +11 more
CVE-2026-102804
6.5
0%
Sep 30
Nothings stb stb_hexwave.h hexwave_init integer overflow
Affected: 2c980bb59875b0d32144a71867fbdebb2f77cd20
CVE-2026-5316
6.5
0%
Apr 2
Nothings stb stb_vorbis.c setup_free allocation of resources
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +17 more
CVE-2025-3406
6.5
1%
Apr 8
Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds
Affected: f056911
CVE-2023-45680
5.5
1%
Oct 20
Null pointer dereference in vorbis_deinit in stb_vorbis
Affected: <= 1.22
CVE-2023-45663
5.5
1%
Oct 20
Disclosure of uninitialized memory in stbi__tga_load in stb_image
Affected: <= 2.28
CVE-2026-5186
5.3
0%
Mar 31
Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more
CVE-2026-5313
4.3
0%
Apr 1
Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more
Showing 26