CVE-2026-5186

creationtimestamp| type| source ---|---|--- 2026-03-31 10:22:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midxggnifh2n...

CVE-2026-5186

The CVE concerns Nothings stb up to 2.30, specifically the Multi-frame GIF File Handler’s stb_image.h function stbi__load_gif_main. A manipulation leads to a double-free, with exploitation requiring local access. Public exploit has been made available. Vendor was contacted early but did not respo...