CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 21/10/2023 |
| CVE-2023-45661 | 높음7.1 | stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation informati | 21/10/2023 |
| CVE-2023-43898 | 보통5.5 | Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file. | 03/10/2023 |
| CVE-2022-28042 | 높음8.8 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. | 15/04/2022 |
| CVE-2022-28041 | 보통6.5 | stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. | 15/04/2022 |
| CVE-2022-25516 | 보통6.5 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input. | 17/03/2022 |
| CVE-2022-25515 | 보통6.5 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input. | 17/03/2022 |
| CVE-2022-25514 | 높음7.5 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input. | 17/03/2022 |
| CVE-2021-42716 | 높음7.1 | An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_image, or read up to 1024 bytes | 21/10/2021 |
| CVE-2021-42715 | 보통5.5 | An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files. | 21/10/2021 |
| CVE-2020-6623 | 높음8.8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. | 08/01/2020 |
| CVE-2020-6622 | 높음8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. | 08/01/2020 |
| CVE-2020-6621 | 높음8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. | 08/01/2020 |
| CVE-2020-6620 | 높음8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. | 08/01/2020 |
| CVE-2020-6619 | 높음8.8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. | 08/01/2020 |
| CVE-2020-6618 | 높음8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. | 08/01/2020 |
| CVE-2020-6617 | 높음8.8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. | 08/01/2020 |
| CVE-2019-20056 | 보통6.5 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. | 29/12/2019 |