nothings

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

nothings records in CISA KEV

No nothings vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stb Image.h 19 records HIGH Stb Truetype.h 12 records HIGH Stb Vorbis.c 11 records HIGH

Records

19 records in Stb Image.h · all components

TI-2023-24466 CVE-2023-45666

Possible double-free or memory leak in stbi__load_gif_main in stb_image

HIGH 81

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2023-10-20 No fix listed CWE-415

TI-2023-24465 CVE-2023-45664

Double-free in stbi__load_gif_main_outofmem in stb_image

HIGH 77

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00933 Published 2023-10-20 No fix listed CWE-415

TI-2023-24463 CVE-2023-45662

Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image

HIGH 74

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00807 Published 2023-10-20 No fix listed CWE-125

TI-2023-24467 CVE-2023-45667

Null pointer dereference because of an uninitialized variable in stb_image

HIGH 72

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01269 Published 2023-10-20 No fix listed CWE-476

TI-2023-24462 CVE-2023-45661

Wild address read in stbi__gif_load_next in stb_image

HIGH 70

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00572 Published 2023-10-20 No fix listed CWE-125

TI-2023-23171 CVE-2023-43281 · GHSA-fr72-j747-8gp8

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to…

HIGH 68

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01328 Published 2023-10-24 No fix listed CWE-415

TI-2023-24464 CVE-2023-45663

Disclosure of uninitialized memory in stbi__tga_load in stb_image

MEDIUM 64

stb_image is a single file MIT licensed library for processing images.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00655 Published 2023-10-20 No fix listed CWE-908

TI-2025-02992 CVE-2025-3408 · GHSA-jfjp-pcc3-pr3f

Nothings stb stb_dupreplace integer overflow

MEDIUM 63

A vulnerability was found in Nothings stb up to f056911.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00507 Published 2025-04-08 No fix listed CWE-189

TI-2023-23558 CVE-2023-43898 · GHSA-r7w9-77p6-9q6m

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function…

MEDIUM 58

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00324 Published 2023-10-03 No fix listed CWE-476

TI-2022-10873 CVE-2022-28042 · GHSA-mg9v-9rhj-95qm

stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.

MEDIUM 41

stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0161 Published 2022-04-15 Will not fix CWE-416

TI-2019-14252 CVE-2019-19777 · GHSA-6rrw-8mq7-2wvv

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has…

MEDIUM 41

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01392 Published 2019-12-13 No fix listed CWE-125

TI-2018-12132 CVE-2018-16981 · GHSA-5p8c-xff7-r336

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based…

MEDIUM 41

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01592 Published 2018-09-12 No fix listed CWE-787

TI-2021-18926 CVE-2021-42716 · GHSA-44mr-92xw-jfrv

An issue was discovered in stb stb_image.h 2.27.

LOW 34

An issue was discovered in stb stb_image.h 2.27.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01456 Published 2021-10-21 Will not fix CWE-120

TI-2022-10872 CVE-2022-28041 · GHSA-q4r7-ggcw-952w

stb_image.h v2.27 was discovered to contain an integer overflow via the function…

LOW 33

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02093 Published 2022-04-15 Will not fix CWE-190

TI-2025-02993 CVE-2025-3409 · GHSA-69p9-7943-9qhx

Nothings stb stb_include_string stack-based overflow

LOW 31

A vulnerability classified as critical has been found in Nothings stb up to f056911.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00533 Published 2025-04-08 No fix listed CWE-119

TI-2019-14476 CVE-2019-20056 · GHSA-f76f-ffcv-7fmm

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has…

LOW 31

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00935 Published 2019-12-29 No fix listed CWE-617

TI-2021-18925 CVE-2021-42715 · GHSA-x76g-p4rm-4xch

An issue was discovered in stb stb_image.h 1.33 through 2.27.

LOW 27

An issue was discovered in stb stb_image.h 1.33 through 2.27.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.013 Published 2021-10-21 Will not fix CWE-835

TI-2025-02991 CVE-2025-3407 · GHSA-53wr-h738-wq84

Nothings stb stbhw_build_tileset_from_image out-of-bounds

LOW 25

A vulnerability was found in Nothings stb up to f056911.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00483 Published 2025-04-08 No fix listed CWE-119

TI-2025-02990 CVE-2025-3406 · GHSA-7249-98jq-4p25

Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds

LOW 25

A vulnerability was found in Nothings stb up to f056911.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00591 Published 2025-04-08 No fix listed CWE-119

Open these records in search →

Critical	2
High	24
Medium	22
Low	0
No CVSS	0