ST
Product
stb_image
by Nothings · last CVE Mar 31, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch

Add stb_image to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-45666
9.8
1%
Oct 20
Possible double-free or memory leak in stbi__load_gif_main in stb_image
Affected: through 2.28
CVE-2023-45664
8.8
1%
Oct 20
Double-free in stbi__load_gif_main_outofmem in stb_image
Affected: through 2.28
CVE-2023-45662
8.1
1%
Oct 20
Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image
Affected: through 2.28
CVE-2023-45667
7.5
1%
Oct 20
Null pointer dereference because of an uninitialized variable in stb_image
Affected: through 2.28
CVE-2023-45661
7.1
1%
Oct 20
Wild address read in stbi__gif_load_next in stb_image
Affected: through 2.28
CVE-2023-45663
5.5
1%
Oct 20
Disclosure of uninitialized memory in stbi__tga_load in stb_image
Affected: through 2.28
CVE-2026-5185
5.3
0%
Mar 31
Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more
Showing 7