CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

Linux Distros Unpatched Vulnerability : CVE-2023-45662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn'...

Linux Distros Unpatched Vulnerability : CVE-2023-45666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn't give guarantees about the content of output value...

Linux Distros Unpatched Vulnerability : CVE-2023-45661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbigifloadnext. This happen...

Linux Distros Unpatched Vulnerability : CVE-2023-45664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out...

Linux Distros Unpatched Vulnerability : CVE-2023-45663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. The stbigetn function reads a specified number of bytes from context typically a file into...

Linux Distros Unpatched Vulnerability : CVE-2021-42715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length...

RHEL 8 : cogl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - stbimage: heap-based buffer overflow CVE-2021-37789 Note that Nessus has not tested for this issue but has instead...

RHEL 7 : stb_image (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - stbimage: heap-based buffer overflow CVE-2021-37789 Note that Nessus has not tested for this issue but has instead...

RHEL 6 : stb_image (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - stbimage: heap-based buffer overflow CVE-2021-37789 Note that Nessus has not tested for this issue but has instead...

Fedora 40 : stb / usd (2023-58af3a2eca)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-58af3a2eca advisory. Security fix for CVE-2023-45661 CVE-2023-45662 CVE-2023-45663 CVE-2023-45664 CVE-2023-45666 CVE-2023-45667 CVE-2023-45675 Tenable has extracted the...

OESA-2024-1231 stb security update

Single-file public domain libraries for C/C++. Security Fixes: stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to...

OESA-2023-1866 stb security update

Single-file public domain libraries for C/C++. Security Fixes: stbimage is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbigifloadnext. This happens because twoback points to a memory address lower than the start of the...

Fedora 39 : CuraEngine (2023-1d57a86dfa)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1d57a86dfa advisory. Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 38 : mlpack (2023-23c0bd9a45)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-23c0bd9a45 advisory. Use RPM macros for python and cmake build directory ---- Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description bloc...

Fedora 39 : mlpack (2023-862bb40df5)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-862bb40df5 advisory. Use RPM macros for python and cmake build directory ---- Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description bloc...

Fedora 39 : stb / usd (2023-def2f95af4)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-def2f95af4 advisory. Security fix for CVE-2023-45661 CVE-2023-45662 CVE-2023-45663 CVE-2023-45664 CVE-2023-45666 CVE-2023-45667 CVE-2023-45675 CVE-2023-43281 ---- A new...

Fedora 37 : stb / usd (2023-a93c06a1d9)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a93c06a1d9 advisory. Security fix for CVE-2023-45661 CVE-2023-45662 CVE-2023-45663 CVE-2023-45664 CVE-2023-45666 CVE-2023-45667 CVE-2023-45675 CVE-2023-43281 Tenable has...

Fedora 38 : attract-mode (2023-1242b3ada2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1242b3ada2 advisory. Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : attract-mode (2023-e58495988e)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e58495988e advisory. Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...