ST
Product
stb
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 17Medium 8Low 0
Watch
Add stb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5317 | 8.8 | Apr 2 | Nothings stb stb_vorbis.c start_decoder out-of-bounds write Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +17 more |
| CVE-2026-5315 | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more |
| CVE-2026-5314 | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more |
| CVE-2025-3409 | 8.8 | Apr 8 | Nothings stb stb_include_string stack-based overflow Affected: f056911 |
| CVE-2025-3408 | 8.8 | Apr 8 | Nothings stb stb_dupreplace integer overflow Affected: f056911 |
| CVE-2025-3407 | 8.8 | Apr 8 | Nothings stb stbhw_build_tileset_from_image out-of-bounds Affected: f056911 |
| CVE-2023-45664 | 8.8 | Oct 20 | Double-free in stbi__load_gif_main_outofmem in stb_image Affected: <= 2.28 |
| CVE-2023-45662 | 8.1 | Oct 20 | Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image Affected: <= 2.28 |
| CVE-2023-45681 | 7.8 | Oct 20 | Out of bounds heap buffer write in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45679 | 7.8 | Oct 20 | Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45678 | 7.8 | Oct 20 | Off-by-one heap buffer write in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45677 | 7.8 | Oct 20 | Heap buffer out of bounds write in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45676 | 7.8 | Oct 20 | Multi-byte write heap buffer overflow in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45675 | 7.8 | Oct 20 | 0 byte write heap buffer overflow in start_decoder in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45667 | 7.5 | Oct 20 | Null pointer dereference because of an uninitialized variable in stb_image Affected: <= 2.28 |
| CVE-2023-45682 | 7.1 | Oct 20 | Wild address read in vorbis_decode_packet_rest in stb_vorbis Affected: <= 1.22 |
| CVE-2023-45661 | 7.1 | Oct 20 | Wild address read in stbi__gif_load_next in stb_image Affected: <= 2.28 |
Showing 17
