Login Request a demo
ST
Product
stb
by nothings · last CVE Sep 30, 2026
26
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 1High 17Medium 8Low 0
Severity
All severities26Critical1High17Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add stb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102805
6.5
0%
Sep 30
Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +11 more
CVE-2026-102804
6.5
0%
Sep 30
Nothings stb stb_hexwave.h hexwave_init integer overflow
Affected: 2c980bb59875b0d32144a71867fbdebb2f77cd20
CVE-2026-5316
6.5
0%
Apr 2
Nothings stb stb_vorbis.c setup_free allocation of resources
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +17 more
CVE-2025-3406
6.5
1%
Apr 8
Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds
Affected: f056911
CVE-2023-45680
5.5
1%
Oct 20
Null pointer dereference in vorbis_deinit in stb_vorbis
Affected: <= 1.22
CVE-2023-45663
5.5
1%
Oct 20
Disclosure of uninitialized memory in stbi__tga_load in stb_image
Affected: <= 2.28
CVE-2026-5186
5.3
0%
Mar 31
Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more
CVE-2026-5313
4.3
0%
Apr 1
Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +25 more
Showing 8