CVE-2023-45663 Disclosure of uninitialized memory in stbi__tga_load in stb_image

2023-10-2023:26:13

CWE-908

GitHub_M

www.cve.org

cve-2023-45663

disclosure

uninitialized memory

stbi__tga_load

stb_image

library

file stream

exploitable.

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typically a file) into the specified buffer. In case the file stream points to the end, it returns zero. There are two places where its return value is not checked: In the stbi__hdr_load function and in the stbi__tga_load function. The latter of the two is likely more exploitable as an attacker may also control the size of an uninitialized buffer.

CNA Affected

[
  {
    "vendor": "nothings",
    "product": "stb",
    "versions": [
      {
        "version": "<= 2.28",
        "status": "affected"
      }
    ]
  }
]