SI
Product
Stb Image.h
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 7Low 0
Watch
Add Stb Image.h to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45666 | 9.8 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2025-3409 | 8.8 | Apr 8 | Nothings stb stb_include_string stack-based overflow Affected: through 2.13 |
| CVE-2025-3408 | 8.8 | Apr 8 | Nothings stb stb_dupreplace integer overflow Affected: through 2.13 |
| CVE-2025-3407 | 8.8 | Apr 8 | Nothings stb stbhw_build_tileset_from_image out-of-bounds Affected: through 2.13 |
| CVE-2023-45664 | 8.8 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2022-28042 | 8.8 | Apr 15 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode Affected: 2.27 |
| CVE-2019-19777 | 8.8 | Dec 13 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main Affected: 2.23 |
| CVE-2018-16981 | 8.8 | Sep 12 | stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function Affected: 2.19 |
| CVE-2023-45662 | 8.1 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2023-45667 | 7.5 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2023-45661 | 7.1 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2021-42716 | 7.1 | Oct 21 | An issue was discovered in stb stb_image.h 2.27 Affected: 2.27 |
| CVE-2025-3406 | 6.5 | Apr 8 | Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds Affected: through 2.13 |
| CVE-2023-43281 | 6.5 | Oct 25 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function Affected: 2.28 |
| CVE-2022-28041 | 6.5 | Apr 15 | stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc Affected: 2.27 |
| CVE-2019-20056 | 6.5 | Dec 29 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned Affected: 2.23 |
| CVE-2023-45663 | 5.5 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2023-43898 | 5.5 | Oct 3 | Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format Affected: 2.28 |
| CVE-2021-42715 | 5.5 | Oct 21 | An issue was discovered in stb stb_image.h 1.33 through 2.27 Affected: 1.33 through 2.27 |
Showing 19