nothings

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

nothings records in CISA KEV

No nothings vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stb Image.h 19 records HIGH Stb Truetype.h 12 records HIGH Stb Vorbis.c 11 records HIGH

Records

48 records

TI-2023-25531 CVE-2023-47212 · GHSA-w3gr-x835-r39j

Integer overflow in stb_vorbis.c

HIGH 82

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0141 Published 2024-05-01 No fix listed CWE-190

TI-2023-24466 CVE-2023-45666

Possible double-free or memory leak in stbi__load_gif_main in stb_image

HIGH 81

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2023-10-20 No fix listed CWE-415

TI-2026-60440 CVE-2026-89266 · GHSA-4hj2-h365-qx39

stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands

HIGH 77

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0064 Published 2026-09-11 No fix listed CWE-787

TI-2023-24465 CVE-2023-45664

Double-free in stbi__load_gif_main_outofmem in stb_image

HIGH 77

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00933 Published 2023-10-20 No fix listed CWE-415

TI-2023-24463 CVE-2023-45662

Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image

HIGH 74

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00807 Published 2023-10-20 No fix listed CWE-125

TI-2023-24478 CVE-2023-45679

Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00505 Published 2023-10-20 No fix listed CWE-415

TI-2023-24477 CVE-2023-45678

Off-by-one heap buffer write in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0074 Published 2023-10-20 No fix listed CWE-787

TI-2023-24476 CVE-2023-45677

Heap buffer out of bounds write in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00523 Published 2023-10-20 No fix listed CWE-787

TI-2023-24475 CVE-2023-45676

Multi-byte write heap buffer overflow in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00505 Published 2023-10-20 No fix listed CWE-787

TI-2023-24474 CVE-2023-45675

0 byte write heap buffer overflow in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00739 Published 2023-10-20 No fix listed CWE-787

TI-2023-24467 CVE-2023-45667

Null pointer dereference because of an uninitialized variable in stb_image

HIGH 72

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01269 Published 2023-10-20 No fix listed CWE-476

TI-2026-65502 CVE-2026-102805 · GHSA-cc6h-2fmv-w53q

Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow

HIGH 70

A flaw has been found in Nothings stb up to 1.16.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00347 Published 2026-09-30 No fix listed CWE-189

TI-2026-65501 CVE-2026-102804 · GHSA-x842-766r-cjq8

Nothings stb stb_hexwave.h hexwave_init integer overflow

HIGH 70

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00347 Published 2026-09-30 No fix listed CWE-189

TI-2023-24481 CVE-2023-45682

Wild address read in vorbis_decode_packet_rest in stb_vorbis

HIGH 70

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00577 Published 2023-10-20 No fix listed CWE-125

TI-2023-24462 CVE-2023-45661

Wild address read in stbi__gif_load_next in stb_image

HIGH 70

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00572 Published 2023-10-20 No fix listed CWE-125

TI-2023-24480 CVE-2023-45681

Out of bounds heap buffer write in stb_vorbis

HIGH 69

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00512 Published 2023-10-20 No fix listed CWE-787

TI-2023-23171 CVE-2023-43281 · GHSA-fr72-j747-8gp8

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to…

HIGH 68

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01328 Published 2023-10-24 No fix listed CWE-415

TI-2022-09146 CVE-2022-25514 · GHSA-5hw4-hqhq-pf4g

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function…

HIGH 66

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01037 Published 2022-03-17 No fix listed CWE-120

TI-2023-24479 CVE-2023-45680

Null pointer dereference in vorbis_deinit in stb_vorbis

MEDIUM 64

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00551 Published 2023-10-20 No fix listed CWE-476

TI-2023-24464 CVE-2023-45663

Disclosure of uninitialized memory in stbi__tga_load in stb_image

MEDIUM 64

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00655 Published 2023-10-20 No fix listed CWE-908

TI-2025-02992 CVE-2025-3408 · GHSA-jfjp-pcc3-pr3f

Nothings stb stb_dupreplace integer overflow

MEDIUM 63

A vulnerability was found in Nothings stb up to f056911.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00507 Published 2025-04-08 No fix listed CWE-189

TI-2023-23558 CVE-2023-43898 · GHSA-r7w9-77p6-9q6m

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function…

MEDIUM 58

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00324 Published 2023-10-03 No fix listed CWE-476

TI-2026-04649 CVE-2026-5317 · GHSA-8mhm-8wmq-8793

Nothings stb stb_vorbis.c start_decoder out-of-bounds write

MEDIUM 57

A security flaw has been discovered in Nothings stb up to 1.22.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00433 Published 2026-04-02 No fix listed CWE-119

TI-2026-04647 CVE-2026-5315 · GHSA-gcmq-v5j6-6rjx

Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds

MEDIUM 57

A vulnerability was determined in Nothings stb up to 1.26.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00515 Published 2026-04-01 No fix listed CWE-119

TI-2026-04646 CVE-2026-5314 · GHSA-x46x-p265-r7jv

Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds

MEDIUM 57

A vulnerability was found in Nothings stb up to 1.26.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0069 Published 2026-04-01 No fix listed CWE-119

Open these records in search →

Critical	2
High	24
Medium	22
Low	0
No CVSS	0