Lucene search
K

37 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в libstb

stbimage.h also known as the stb image loader, version 2.23, as used in libsixel and other products, has an assertion failure in stbishiftsigned...

6.5CVSS6.6AI score0.00468EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. A properly crafted image file may trigger an out-of-bounds memcpy read in stbigifloadnext. This occurs because twoback points to a memory address that is lower than the start of the buffer. This issue could b...

7.1CVSS7AI score0.00083EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в libstb

It was discovered that stbimage.h v2.27 contains an integer overflow vulnerability through the stbijpegdecodeblockprogdc function. This vulnerability allows attackers to cause a Denial of Service DoS attack through unspecified vectors...

6.5CVSS6.8AI score0.01116EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в libstb

stbimage.h 2.27 contains a heap-based buffer within stbijpegload, which can lead to information disclosure or denial of service...

8.1CVSS7.3AI score0.00172EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в libstb

It was discovered that STB v2.27 contains an integer shift of invalid size in the component stbijpegdecodeblockprogac...

8.8CVSS7.5AI score0.00152EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in libstb

STBVorbis is a single-file library licensed under MIT that processes OGG Vorbis files. A maliciously crafted file may cause memory writes to exceed the allocated heap buffer in startdecoder. The root cause of this issue is a potential integer overflow in sizeofchar f-commentlistlength, which may...

7.8CVSS7.6AI score0.00049EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в libstb

stbvorbis is a single-file MIT licensed library for processing OGG Vorbis files. A maliciously crafted file may trigger an out-of-bounds write vulnerability in the line f-vendorlen = char'\0';. The root cause of this issue is that if len read from startdecoder is -1, then len + 1 becomes 0 when...

7.8CVSS7.6AI score0.00087EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в libstb

stbimage is a single-file library licensed under MIT that is used for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails, it returns a null pointer, and the z variable may remain uninitialized. If the caller also sets the vertical flipping flag, the process continues by calling...

7.5CVSS7.2AI score0.0014EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.8 views

Astra Linux – Vulnerability in libstb

It was discovered that stbimage.h v2.27 contains a heap-based use-after-free issue due to the stbijpeghuffdecode function...

8.8CVSS7.9AI score0.00468EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...

5.5CVSS5.6AI score0.00143EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. When stbisetflipverticallyonload is set to TRUE, and reqcomp is set to a value that does not match the actual number of components per pixel, the library attempts to flip the image vertically. A specially...

8.1CVSS7.6AI score0.00108EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. A properly crafted image file can trigger an attempt by stbiloadgifmainoutofmem to double-free the out variable. This occurs in stbiloadgifmain, because when the layers stride value is zero, the behavior is...

8.8CVSS7.9AI score0.00192EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/01 12:0 a.m.3 views

Debian dla-4493 : libstb-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4493 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4493-1 [email protected]...

8.8CVSS6.2AI score0.01116EPSS
Exploits4References12
OpenVAS
OpenVAS
added 2026/02/27 12:0 a.m.4 views

Debian: Security Advisory (DLA-4493-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6AI score0.01116EPSS
Exploits4References2
Debian
Debian
added 2026/02/26 8:21 a.m.6 views

[SECURITY] [DLA 4493-1] libstb security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4493-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA February 26, 2026 https://wiki.debian.org/LTS -...

8.8CVSS6.1AI score0.01116EPSS
Exploits4
OSV
OSV
added 2026/02/26 12:0 a.m.5 views

DLA-4493-1 libstb - security update

Bulletin has no description...

8.8CVSS5.1AI score0.01116EPSS
Exploits4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the stb_vorbis component in the C/C++ Libstb library allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stbvorbis component in the C/C++ Libstb library is related to the repeated release of memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially creat...

7.5CVSS7.2AI score0.0005EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the C/C++ Libstb library lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service failures through the use of a specially created file...

6.5CVSS7.1AI score0.00122EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the C/C++ Libstb library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the C/C++ Libstb library lies in reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

5.3CVSS6.7AI score0.00022EPSS
Exploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the C/C++ Libstb library, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the C/C++ Libstb library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially created file...

7.5CVSS7.4AI score0.0005EPSS
Exploits0References12Affected Software2
Rows per page
Query Builder