CVE-2026-5186

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

CVE-2026-5185

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

CVE-2026-5185 Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow

A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been...

stb 资源管理错误漏洞

STB is a public domain library for C/C++ developed by Sean Barrett. Versions of STB prior to 2.30 contained a resource management vulnerability, which stemmed from incorrect operations on the stbiloadgifmain function in the stbimage.h file. This vulnerability could lead to double deallocation of...

CVE-2019-20056

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has an assertion failure in stbishiftsigned...

Fedora 43 : CuraEngine (2025-19c65f1d15)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-19c65f1d15 advisory. - Rebuilt with latest patched stbimage: memory-safety fixes Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : CuraEngine (2025-fc872e9426)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fc872e9426 advisory. - Rebuilt with latest patched stbimage: memory-safety fixes Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : alexvsbus (2025-673ec8d684)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-673ec8d684 advisory. Rebuilt against patched stbimage ---- Initial build for F43 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : usd (2025-073e4f7991)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-073e4f7991 advisory. Rebuilt with stbimage patched for two new security bugs. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 42 : stb (2025-7ea43a29f2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7ea43a29f2 advisory. Patch two newly-reported memory-safety bugs in stbimage: - https://github.com/nothings/stb/issues/1860 - https://github.com/nothings/stb/issues/1861 Tenable...

Fedora: Security Advisory (FEDORA-2025-073e4f7991)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-0cc929ff17)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-7ea43a29f2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2019-6142

Malware in sbrugna...

EUVD-2019-10612

Malware in sbrugna...

EUVD-2019-9376

Malware in sbrugna...

EUVD-2022-32426

Malicious code in bioql PyPI...

EUVD-2023-47700

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-43281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain functio...