603 matches found
PT-2023-9360
Name of the Vulnerable Software and Affected Versions stb vorbis affected versions not specified Description The issue is related to a potential integer overflow in sizeofchar f-comment list length which may cause setup malloc to allocate less memory than required. This can lead to a memory write...
PT-2023-9362 · Stb Image +3 · Stb Image +3
Name of the Vulnerable Software and Affected Versions: stb image affected versions not specified Description: The issue is related to the stbi load gif from memory component of the stb image library, which is a single file MIT licensed library for processing images. If stbi load gif main fails, i...
PT-2023-9363 · Stb Image +3 · Stb Image +3
Name of the Vulnerable Software and Affected Versions: stb image affected versions not specified Description: The issue is related to the stbi load gif main function in the stb image library, which may lead to a memory leak or double-free if the caller chooses to free the delays memory only when...
PT-2023-9364 · Stb Image +3 · Stb Image +3
Name of the Vulnerable Software and Affected Versions: stb image affected versions not specified Description: The issue is related to a double-free memory error in the stbi load gif main component of the stb image library. This can be triggered by a crafted image file, potentially allowing a remo...
PT-2023-9365 · Stb Image +3 · Stb Image +3
Name of the Vulnerable Software and Affected Versions: stb image affected versions not specified Description: The issue is related to the stbi set flip vertically on load function in the stb image library. When this function is set to TRUE and req comp is set to a number that doesn’t match the re...
PT-2023-9361 · Unknown +3 · Stb Vorbis +3
Name of the Vulnerable Software and Affected Versions: stb vorbis affected versions not specified Description: The issue is related to a crafted file that may trigger an out of bounds write in f-vendorlen = char'0';. This occurs when the length read in start decoder is -1 and len + 1 becomes 0 wh...
stb-boecker.de Cross Site Scripting vulnerability OBB-3487153
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the stbi__extend_receive function in the stb_image.h component of the C/C++ Libstb library allows a attacker to gain access to confidential data, compromise its integrity, and cause a service failure.
The vulnerability of the stbiextendreceive function in the stbimage.h component of the C/C++ Libstb library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause a service failure b...
Fedora: Security Advisory for stb (FEDORA-2023-815aa77986)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : stb (2023-815aa77986)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-815aa77986 advisory. Fix null pointer dereference in stbimage Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora: Security Advisory for stb (FEDORA-2023-dcf1c398fb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: stb-0^20230129git5736b15-0.2.fc37
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 36 Update: stb-0^20230129git5736b15-0.2.fc36
Single-file public domain libraries for C/C++...
Fedora 37 : stb (2023-dcf1c398fb)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-dcf1c398fb advisory. Fix null pointer dereference in stbimage Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora 36 : stb (2023-051e9ea171)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-051e9ea171 advisory. Fix null pointer dereference in stbimage Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora: Security Advisory for stb (FEDORA-2023-051e9ea171)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2019-13218
Division by zero in the predictpoint function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...
SUSE CVE-2019-13221
A stack buffer overflow in the computecodewords function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file...
SUSE CVE-2019-13220
Use of uninitialized stack variables in the startdecoder function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...