Double Free

Overview Affected versions of this package are vulnerable to Double Free via the stbiloadgifmain function. An attacker can cause a denial of service by sending a crafted file. Remediation There is no fixed version for stb. References - GitHub Gist - PoC Credit: peccc...

OSV-2023-1063 Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63537 Crash type: Heap-double-free Crash state: dwgfreeobject dwgfree llvmfuzz.c...

CVE-2023-43281

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain function...

PT-2023-35542 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash type of Heap-double-free was reported. The crash state involves dwg free object and dwg free functions in the llvmfuzz.c file. Recommendations: A...

CVE-2023-43281: Double Free

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain function...

CVE-2023-43281

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain function...

CVE-2023-43281

CVE-2023-43281 describes a double free vulnerability in Nothings Stb Image.h v2.28. The flaw allows a remote attacker to cause a denial of service by supplying a crafted file to the function stbi_load_gif_main . Public documentation in the connected sources confirms the vulnerability in the stb_i...

Ubuntu 16.04 ESM : Gifsicle vulnerabilities (USN-4803-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4803-1 advisory. It was discovered that Gifsicle did not properly handle certain input. If a user were tricked into opening a malicious GIF, an attacker could potentially...

PT-2023-28759 · Unknown · Stb Image.H

Name of the Vulnerable Software and Affected Versions: Nothings Stb Image.h version 2.28 Description: The issue allows a remote attacker to cause a denial of service via a crafted file to the stbi load gif main function. This is a Double Free vulnerability. Recommendations: For Nothings Stb Image...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the stbiloadgifmainoutofmem function, an attacker can potentially exploit a double-free condition by using a specially crafted image file. This is only exploitable in a multi-threaded environment and, in the worst case, m...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the startdecoder function, an attacker can trigger memory allocation failure with a specially crafted file. This causes the function to return early, leaving some pointers in f-commentlist initialized. Later, setupfree is...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the stbiloadgifmain function, an attacker can cause a memory leak or a double-free error by manipulating the delays output value. This is only exploitable if stbiloadgifmain returns a null value and stbiconvertformat is...

CVE-2023-45666

stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn’t give guarantees about the content of output value delays upon failure. Although it sets delays to zero at the beginning, it doesn’t do it in case the image is not recognized as GIF and a...

DEBIAN-CVE-2023-45664

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...

Double free

stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn’t give guarantees about the content of output value delays upon failure. Although it sets delays to zero at the beginning, it doesn’t do it in case the image is not recognized as GIF and a...

UBUNTU-CVE-2023-45664

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...

UBUNTU-CVE-2023-45666

stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn’t give guarantees about the content of output value delays upon failure. Although it sets delays to zero at the beginning, it doesn’t do it in case the image is not recognized as GIF and a...

CVE-2023-45666

stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn’t give guarantees about the content of output value delays upon failure. Although it sets delays to zero at the beginning, it doesn’t do it in case the image is not recognized as GIF and a...

Double free

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...

CVE-2023-45664

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...