nothings

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

nothings records in CISA KEV

No nothings vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stb Image.h 19 records HIGH Stb Truetype.h 12 records HIGH Stb Vorbis.c 11 records HIGH

Records

11 records in Stb Vorbis.c · all components

TI-2023-25531 CVE-2023-47212 · GHSA-w3gr-x835-r39j

Integer overflow in stb_vorbis.c

HIGH 82

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0141 Published 2024-05-01 No fix listed CWE-190

TI-2023-24478 CVE-2023-45679

Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00505 Published 2023-10-20 No fix listed CWE-415

TI-2023-24477 CVE-2023-45678

Off-by-one heap buffer write in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0074 Published 2023-10-20 No fix listed CWE-787

TI-2023-24476 CVE-2023-45677

Heap buffer out of bounds write in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00523 Published 2023-10-20 No fix listed CWE-787

TI-2023-24475 CVE-2023-45676

Multi-byte write heap buffer overflow in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00505 Published 2023-10-20 No fix listed CWE-787

TI-2023-24474 CVE-2023-45675

0 byte write heap buffer overflow in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00739 Published 2023-10-20 No fix listed CWE-787

TI-2023-24481 CVE-2023-45682

Wild address read in vorbis_decode_packet_rest in stb_vorbis

HIGH 70

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00577 Published 2023-10-20 No fix listed CWE-125

TI-2023-24480 CVE-2023-45681

Out of bounds heap buffer write in stb_vorbis

HIGH 69

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00512 Published 2023-10-20 No fix listed CWE-787

TI-2023-24479 CVE-2023-45680

Null pointer dereference in vorbis_deinit in stb_vorbis

MEDIUM 64

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00551 Published 2023-10-20 No fix listed CWE-476

TI-2026-04649 CVE-2026-5317 · GHSA-8mhm-8wmq-8793

Nothings stb stb_vorbis.c start_decoder out-of-bounds write

MEDIUM 57

A security flaw has been discovered in Nothings stb up to 1.22.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00433 Published 2026-04-02 No fix listed CWE-119

TI-2026-04648 CVE-2026-5316 · GHSA-pmw2-j962-7frc

Nothings stb stb_vorbis.c setup_free allocation of resources

LOW 24

A vulnerability was identified in Nothings stb up to 1.22.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00447 Published 2026-04-02 No fix listed CWE-400

Open these records in search →