Out-of-bounds Read

🗓️ 26 Oct 2023 09:16:48Reported by Veracode Vulnerability DatabaseType

libstb.so Out-of-bounds Read vulnerability with `stbi_set_flip_vertically_on_load` and `req_comp

Reporter	Title	Published	Views	Family All 44
AlpineLinux	CVE-2023-45662	20 Oct 202323:26	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в libstb	20 May 202605:53	–	astralinux
CNNVD	stb_image buffer error vulnerability	21 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45662	20 Oct 202323:26	–	cve
Cvelist	CVE-2023-45662 Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image	20 Oct 202323:26	–	cvelist
Debian CVE	CVE-2023-45662	20 Oct 202323:26	–	debiancve
EUVD	EUVD-2023-49953	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 37 Update: stb-0^20231011gitbeebb24-12.fc37	4 Nov 202303:46	–	fedora
Fedora	[SECURITY] Fedora 38 Update: usd-22.05b-39.fc38	4 Nov 202303:42	–	fedora
Fedora	[SECURITY] Fedora 39 Update: stb-0^20231011gitbeebb24-12.fc39	3 Nov 202319:06	–	fedora

Vulners

Node

stb_project stbMatch0_git20220908-r3cpp

AND

stb_project stbMatch0_git20220908-r3cpp

AND

stb_project stbMatch0_git20220908-r1cpp

AND

stb_project stbMatch0_git20220908-r0cpp

AND

Source	Link
github	www.github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_image.h
securitylab	www.securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NMXKOKPP4BKTNUTF5KSRDQAWOUILQZNO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QVABVF4GEM6BYD5L4L64RCRSXUHY6LGN/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR/

04 Nov 2023 10:19Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.5 - 8.1

EPSS0.00108

SSVC