Vulnerability · Published Oct 24, 2023 · Assigned by mitre
CVE-2023-43281
Medium 6.5
In plain English
A medium-severity security flaw in the arm-compute-library package (Ubuntu). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.3%top 28.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | arm-compute-library | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | arm-compute-library | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | arm-compute-library | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | arm-compute-library | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | arm-compute-library | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | armnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | armnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | armnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | armnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | bibledit | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | bibledit | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | bibledit | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | bibledit | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | bibledit | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | bibledit-cloud | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | bibledit-cloud | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | bibledit-cloud | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | bibledit-cloud | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | bibledit-cloud | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | emscripten | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | emscripten | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | emscripten | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | emscripten | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | emscripten | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | goxel | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | goxel | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | goxel | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | goxel | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | goxel | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | libsfml | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | libsfml | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | libsfml | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | libsfml | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | libsfml | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | libstb | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | libstb | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | libstb | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | libstb | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | libstb | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | love | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | love | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | love | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | love | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | love | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | timg | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | timg | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | timg | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | timg | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | timg | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | tiny-dnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | tiny-dnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | tiny-dnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | tiny-dnn | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | utox | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | utox | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | utox | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | utox | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | utox | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:22.04:LTS | visp | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:24.04:LTS | visp | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:25.10 | visp | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.04:LTS | visp | no fix listed | UBUNTU-CVE-2023-43281 |
| Ubuntu:26.10 | visp | no fix listed | UBUNTU-CVE-2023-43281 |
Affected products (as reported)
References
- https://gist.github.com/peccc/d8761f6ac45ad55cbd194dd7e6fdfdac
- https://github.com/peccc/double-stb
- FEDORA-2023-def2f95af4 vendor-advisory
- FEDORA-2023-a93c06a1d9 vendor-advisory
- FEDORA-2023-d486d13cfd vendor-advisory