CVE-2025-15155

Concrete details available: CVE-2025-15155 affects floooh sokol up to commit 16cbcc864012898793cd2bc57f802499a264ea40, specifically the _sg_pipeline_desc_defaults function in sokol_gfx.h. The issue is a stack-based buffer overflow (root cause: improper handling in the _sg_pipeline_desc_defaults p...

CVE-2025-14958

The CVE-2025-14958 entry concerns floooh sokol (sokol_gfx.h) with a heap-based overflow in the _sg_pipeline_common_init function. Publicly released exploit shows local access is required, and the issue affects multiple releases prior to the patch 33e2271c431bf21de001e972f72da17a984da932. The vuln...