[SECURITY] Fedora 43 Update: stb-0^20251025gitf1c79c0-2.fc43

Single-file public domain libraries for C/C++...

CVE-2020-6617

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

SUSE CVE-2025-3407

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhwbuildtilesetfromimage. The manipulation of the argument hcount/vcount leads to out-of-bounds read. The attack can be launched remotely. This product takes...

SUSE CVE-2025-3409

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the manipulation of the hcount/vcount arguments. An attacker can read memory locations that should be inaccessible by providing crafted input values. Remediation There is no fixed version for stb. References -...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to the stbhwbuildtilesetfromimage function. An attacker can read memory locations that should be inaccessible by manipulating the w argument. Remediation There is no fixed version for stb. References - GitHub Issu...

DEBIAN-CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

DEBIAN-CVE-2025-3407

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhwbuildtilesetfromimage. The manipulation of the argument hcount/vcount leads to out-of-bounds read. The attack can be launched remotely. This product takes...

UBUNTU-CVE-2025-3407

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhwbuildtilesetfromimage. The manipulation of the argument hcount/vcount leads to out-of-bounds read. The attack can be launched remotely. This product takes...

UBUNTU-CVE-2025-3406

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhwbuildtilesetfromimage of the component Header Array Handler. The manipulation of the argument w leads to out-of-bounds read. It is possible to launch the attack remotely...

stb 安全漏洞

stb is a single-file public domain library of stb for C/C++ by Sean Barrett, an individual developer. A security vulnerability exists in stb that stems from a stack-based buffer overflow due to the parameter pathtoincludes...

stb 安全漏洞

stb is a stb single-file public domain library for C/C++ by Sean Barrett, an individual developer. A security vulnerability exists in stb that stems from insufficient input validation of the stbdupreplace function, which could allow a remote attacker to perform a malicious operation...

stb 缓冲区错误漏洞

stb is a single-file public domain library of stb for C/C++ by the individual developer Sean Barrett. A buffer error vulnerability exists in stb that stems from an out-of-bounds read due to the parameter hcount/vcount...

stb 缓冲区错误漏洞

stb is a single-file public domain library of stb for C/C++ by the individual developer Sean Barrett. A buffer error vulnerability exists in stb that stems from an out-of-bounds read due to the parameter w...

[SECURITY] Fedora 40 Update: stb-0^20241002git31707d1-4.fc40

Single-file public domain libraries for C/C++...

The vulnerability of the `stbi_set_flip_vertically_on_load` component in the C/C++ Libstb library involves reading data beyond the allowable buffer boundaries. This allows attackers to access confidential data and also trigger a denial-of-service attack.

The vulnerability of the stbisetflipverticallyonload component in the C/C++ Libstb library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, as well as cause service interruptions through the use of a...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the stbiloadgifmain function. An attacker can cause a denial of service by sending a crafted file. Remediation There is no fixed version for stb. References - GitHub Gist - PoC Credit: peccc...

stb Resource Management Error Vulnerability

stb is a single-file public domain library for C/C ++. A security vulnerability exists in stb version v.2.28, which originates from a vulnerability that allows remote attackers to cause a denial of service via a crafted file to the stbiloadgifmain function...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the startdecoder function, an attacker can execute arbitrary code by exploiting an integer overflow that leads to memory write past an allocated heap buffer. This is due to the potential integer overflow in...

stb code issue vulnerability

stb is a single-file public domain library for C/C ++. A code issue vulnerability exists in stb version 2.28, which stems from a null pointer dereference issue in the function stbiconvertformat. An attacker could exploit this vulnerability to cause a Denial of Service DoS via a specially crafted...