CVE-2025-3406

CVE-2025-3406 affects the Nothings stb library (up to f056911) with the vulnerable function stbhw_build_tileset_from_image in the Header Array Handler . The issue arises from manipulating the argument w , causing an out-of-bounds read. It is stated that the attack can be launched remotely. The re...

CVE-2025-3406 Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhwbuildtilesetfromimage of the component Header Array Handler. The manipulation of the argument w leads to out-of-bounds read. It is possible to launch the attack remotely...

CVE-2025-3406

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhwbuildtilesetfromimage of the component Header Array Handler. The manipulation of the argument w leads to out-of-bounds read. It is possible to launch the attack remotely...

CVE-2025-3406 Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhwbuildtilesetfromimage of the component Header Array Handler. The manipulation of the argument w leads to out-of-bounds read. It is possible to launch the attack remotely...

stb 缓冲区错误漏洞

stb is a single-file public domain library of stb for C/C++ by the individual developer Sean Barrett. A buffer error vulnerability exists in stb that stems from an out-of-bounds read due to the parameter hcount/vcount...

stb 安全漏洞

stb is a single-file public domain library of stb for C/C++ by Sean Barrett, an individual developer. A security vulnerability exists in stb that stems from a stack-based buffer overflow due to the parameter pathtoincludes...

PT-2025-15352 · Unknown +1 · Nothings Stb +1

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911 Description: A critical vulnerability has been found in Nothings stb, affecting the stb include string function. The manipulation of the path to includes argument leads to a stack-based buffer overflow. This issue c...

stb 安全漏洞

stb is a stb single-file public domain library for C/C++ by Sean Barrett, an individual developer. A security vulnerability exists in stb that stems from insufficient input validation of the stbdupreplace function, which could allow a remote attacker to perform a malicious operation...

stb 缓冲区错误漏洞

stb is a single-file public domain library of stb for C/C++ by the individual developer Sean Barrett. A buffer error vulnerability exists in stb that stems from an out-of-bounds read due to the parameter w...

PT-2025-15335 · Nothings +1 · Stb +1

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911 Description: A critical issue was found in Nothings stb, affecting the stb dupreplace function. The manipulation leads to integer overflow, and the attack may be launched remotely. The product uses continuous delive...

CVE-2025-3409: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

CVE-2025-3408: Integer Overflow or Wraparound

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

Linux Distros Unpatched Vulnerability : CVE-2023-45680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that...

Linux Distros Unpatched Vulnerability : CVE-2023-45667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails it returns a null pointer and may keep t...

Linux Distros Unpatched Vulnerability : CVE-2022-27938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage.h aka the stb image loader 2.19, as used in libsixel and other products, has a reachable assertion in stbicreatepngimageraw. CVE-2022-27938 Note that...

Linux Distros Unpatched Vulnerability : CVE-2019-20056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has an assertion failure in stbishiftsigned. CVE-2019-20056 Note that Nessus...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detection when STB is unavailable. Loading the amdpmc module with the option amdpmc enablestb=1 may result in the following messages in the kernel ring buffer: amdpmc AMDI0009:00: SMU cmd failed. err: 0xff...

Astra Linux – Vulnerability in libstb

stbvorbis is a single-file library licensed under the MIT license, designed for processing OGG Vorbis files. A maliciously crafted file may trigger an out-of-bounds write vulnerability in the line f-vendorlen = char'\0';. The root cause of this issue is that if len, read from startdecoder, is a...

Astra Linux – Vulnerability in libstb

stbvorbis is a single-file library licensed under the MIT license, designed for processing OGG Vorbis files. A properly crafted file may cause a memory allocation failure in the startdecoder function. In such cases, the function returns early, but some of the pointers in f-commentlist remain...

Astra Linux – Vulnerability in libstb

STBVorbis is a single-file library licensed under MIT that processes OGG Vorbis files. A properly crafted file may trigger an out-of-buffer write in the startdecoder function, because the maximum number of m-submaps is 16, but submapfloor and submapresidue are declared as arrays of 15 elements...