NO
Vendor
Nothings
76
CVEs
0
On KEV
2
New 30D
Products
ST9.8
stb
nothings
26 CVEs0 on KEV2 new
SI9.8
Stb Image.h
Nothings
19 CVEs0 on KEV0 new
ST8.8
Stb Truetype.h
Nothings
12 CVEs0 on KEV0 new
SV9.8
Stb Vorbis.c
Nothings
11 CVEs0 on KEV0 new
ST9.8
stb_image
Nothings
7 CVEs0 on KEV0 new
ST8.2
stb_vorbis
nothings
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102805 | ST stb Nothings | 6.5 | Sep 30 | Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow |
| CVE-2026-102804 | ST stb Nothings | 6.5 | Sep 30 | Nothings stb stb_hexwave.h hexwave_init integer overflow |
| CVE-2026-89266 | ST stb_vorbis nothings | 8.2 | Sep 11 | stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands |
| CVE-2026-5317 | ST stb Nothings | 8.8 | Apr 2 | Nothings stb stb_vorbis.c start_decoder out-of-bounds write |
| CVE-2026-5316 | ST stb Nothings | 6.5 | Apr 2 | Nothings stb stb_vorbis.c setup_free allocation of resources |
| CVE-2026-5315 | ST stb Nothings | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds |
| CVE-2026-5314 | ST stb Nothings | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds |
| CVE-2026-5313 | ST stb Nothings | 4.3 | Apr 1 | Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service |
| CVE-2026-5186 | ST stb Nothings | 5.3 | Mar 31 | Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free |
| CVE-2026-5185 | ST stb_image Nothings | 5.3 | Mar 31 | Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow |
| CVE-2025-3409 | ST stb Nothings | 8.8 | Apr 8 | Nothings stb stb_include_string stack-based overflow |
| CVE-2025-3408 | ST stb Nothings | 8.8 | Apr 8 | Nothings stb stb_dupreplace integer overflow |
| CVE-2025-3407 | ST stb Nothings | 8.8 | Apr 8 | Nothings stb stbhw_build_tileset_from_image out-of-bounds |
| CVE-2025-3406 | ST stb Nothings | 6.5 | Apr 8 | Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds |
| CVE-2023-47212 | SV Stb Vorbis.c Nothings | 9.8 | May 1 | A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22 |
| CVE-2023-43281 | SI Stb Image.h Nothings | 6.5 | Oct 24 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function |
| CVE-2023-45682 | ST stb nothings | 7.1 | Oct 20 | Wild address read in vorbis_decode_packet_rest in stb_vorbis |
| CVE-2023-45681 | ST stb nothings | 7.8 | Oct 20 | Out of bounds heap buffer write in stb_vorbis |
| CVE-2023-45680 | ST stb nothings | 5.5 | Oct 20 | Null pointer dereference in vorbis_deinit in stb_vorbis |
| CVE-2023-45679 | ST stb nothings | 7.8 | Oct 20 | Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis |
| CVE-2023-45678 | ST stb nothings | 7.8 | Oct 20 | Off-by-one heap buffer write in start_decoder in stb_vorbis |
| CVE-2023-45677 | ST stb nothings | 7.8 | Oct 20 | Heap buffer out of bounds write in start_decoder in stb_vorbis |
| CVE-2023-45676 | ST stb nothings | 7.8 | Oct 20 | Multi-byte write heap buffer overflow in start_decoder in stb_vorbis |
| CVE-2023-45675 | ST stb nothings | 7.8 | Oct 20 | 0 byte write heap buffer overflow in start_decoder in stb_vorbis |
| CVE-2023-45667 | ST stb nothings | 7.5 | Oct 20 | Null pointer dereference because of an uninitialized variable in stb_image |
| CVE-2023-45666 | ST stb nothings | 9.8 | Oct 20 | Possible double-free or memory leak in stbi__load_gif_main in stb_image |
| CVE-2023-45664 | ST stb nothings | 8.8 | Oct 20 | Double-free in stbi__load_gif_main_outofmem in stb_image |
| CVE-2023-45663 | ST stb nothings | 5.5 | Oct 20 | Disclosure of uninitialized memory in stbi__tga_load in stb_image |
| CVE-2023-45662 | ST stb nothings | 8.1 | Oct 20 | Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image |
| CVE-2023-45661 | ST stb nothings | 7.1 | Oct 20 | Wild address read in stbi__gif_load_next in stb_image |
| CVE-2023-43898 | SI Stb Image.h Nothings | 5.5 | Oct 3 | Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format |
| CVE-2022-28042 | SI Stb Image.h Nothings | 8.8 | Apr 15 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode |
| CVE-2022-28041 | SI Stb Image.h Nothings | 6.5 | Apr 15 | stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc |
| CVE-2022-25516 | ST Stb Truetype.h Nothings | 6.5 | Mar 17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h |
| CVE-2022-25515 | ST Stb Truetype.h Nothings | 6.5 | Mar 17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h |
| CVE-2022-25514 | ST Stb Truetype.h Nothings | 7.5 | Mar 17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h |
| CVE-2021-42716 | SI Stb Image.h Nothings | 7.1 | Oct 21 | An issue was discovered in stb stb_image.h 2.27 |
| CVE-2021-42715 | SI Stb Image.h Nothings | 5.5 | Oct 21 | An issue was discovered in stb stb_image.h 1.33 through 2.27 |
| CVE-2020-6623 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index |
| CVE-2020-6622 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8 |
| CVE-2020-6621 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT |
| CVE-2020-6620 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8 |
| CVE-2020-6619 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek |
| CVE-2020-6618 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table |
| CVE-2020-6617 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int |
| CVE-2019-20056 | SI Stb Image.h Nothings | 6.5 | Dec 29 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned |
| CVE-2019-19777 | SI Stb Image.h Nothings | 8.8 | Dec 13 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main |
| CVE-2018-16981 | SI Stb Image.h Nothings | 8.8 | Sep 12 | stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function |
