Lucene search
K

50 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.6 views

Astra Linux - уязвимость в libstb

Buffer overflow vulnerability in the function stbiextendreceive in stbimage.h in stb 2.26, caused by a crafted JPEG file...

7.8CVSS7.2AI score0.00188EPSS
Exploits1References2
Fedora
Fedora
added 2026/04/18 1:9 a.m.3 views

[SECURITY] Fedora 42 Update: stb-0^20260313git904aa67-2.fc42

Single-file public domain libraries for C/C++...

5.7AI score
Exploits0
Fedora
Fedora
added 2026/04/18 12:53 a.m.3 views

[SECURITY] Fedora 43 Update: stb-0^20260313git904aa67-2.fc43

Single-file public domain libraries for C/C++...

5.7AI score
Exploits0
Snyk
Snyk
added 2026/04/02 12:45 a.m.1 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the startdecoder function. An attacker can cause application crashes, disclose sensitive information, or corrupt data by supplying specially crafted audio files to applications utilizing the affected library...

8.8CVSS6.6AI score0.00021EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/04/02 12:45 a.m.3 views

CVE-2026-5317

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function startdecoder of the file stbvorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The...

8.8CVSS5.9AI score0.00021EPSS
Exploits1
OSV
OSV
added 2026/04/02 12:16 a.m.3 views

DEBIAN-CVE-2026-5315

A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbttbufget8 in the library stbtruetype.h of the component TTF File Handler. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. The exploit has been publicly...

8.8CVSS4.7AI score0.00187EPSS
Exploits1References1
NVD
NVD
added 2026/04/02 12:16 a.m.2 views

CVE-2026-5315

A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbttbufget8 in the library stbtruetype.h of the component TTF File Handler. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. The exploit has been publicly...

8.8CVSS0.00187EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.2 views

stb 安全漏洞

STB is a publicly available library for C/C++ developed by Sean Barrett. Versions of STB prior to 1.22 contained security vulnerabilities, which stemmed from resource allocation issues in the setupfree function within the file stbvorbis.c. These vulnerabilities could lead to remote attacks...

6.5CVSS5.8AI score0.00164EPSS
Exploits1References4
NVD
NVD
added 2026/04/01 11:17 p.m.2 views

CVE-2026-5314

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made...

8.8CVSS0.00063EPSS
Exploits1References4
Snyk
Snyk
added 2026/04/01 11:15 p.m.1 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the stbttbufget8 function. An attacker can cause a denial of service by supplying a specially crafted TrueType Font file that triggers an out-of-bounds read during processing. Workaround This vulnerability can be...

8.8CVSS5.9AI score0.00187EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/04/01 10:15 p.m.4 views

CVE-2026-5314

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made...

8.8CVSS4.7AI score0.00063EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2026/04/01 10:15 p.m.1 views

CVE-2026-5314

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made...

5.3CVSS5.4AI score0.00063EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/01 9:30 p.m.1 views

CVE-2026-5313

A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbigifloadnext in the library stbimage.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and ma...

5.3CVSS5.4AI score0.00049EPSS
Exploits0References4Affected Software1
Snyk
Snyk
added 2026/04/01 9:30 p.m.3 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the stbigifloadnext function. An attacker can cause the application to become unavailable by enticing a user to open a specially crafted GIF image. This is only exploitable if a user interacts...

5.3CVSS5.9AI score0.00049EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.4 views

PT-2026-29639

Name of the Vulnerable Software and Affected Versions Nothings stb versions up to 1.26 Description A flaw exists in Nothings stb, specifically within the TTF File Handler component, impacting the stbtt InitFont internal function in the stb truetype.h library. A manipulation of the function can le...

8.8CVSS5.6AI score0.00063EPSS
Exploits1References12
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.5 views

stb 缓冲区错误漏洞

STB is a publicly available library for C/C++ developed by Sean Barrett. Versions of STB prior to 1.26 contained a buffer error vulnerability. This vulnerability stemmed from an out-of-bounds read in the stbtruetype.h library within the TTF File Handler component, which could lead to remote attac...

8.8CVSS6AI score0.00063EPSS
Exploits1References4
OSV
OSV
added 2026/03/31 8:15 a.m.3 views

UBUNTU-CVE-2026-5186

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbiloadgifmain of the file stbimage.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and...

5.3CVSS5.6AI score0.00015EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.5 views

stb 安全漏洞

STB is a publicly available library for C/C++ developed by Sean Barrett. Versions of STB prior to 2.30 contained security vulnerabilities, which stemmed from incorrect operations on the stbigifloadnext function in the stbimage.h file, potentially leading to heap buffer overflows...

5.3CVSS6.2AI score0.00015EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2025/12/08 12:0 a.m.4 views

Ubuntu: Security Advisory (USN-7913-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.04193EPSS
Exploits3References2
Fedora
Fedora
added 2025/12/04 1:2 a.m.5 views

[SECURITY] Fedora 42 Update: stb-0^20251025gitf1c79c0-2.fc42

Single-file public domain libraries for C/C++...

7AI score
Exploits0
Rows per page
Query Builder