Nothings

Products

ProductCVEsExploitedLatest
stb26–Sep 30, 2026
stb_image1–Mar 31, 2026
stb_vorbis1–Sep 11, 2026

Exploited and recent CVEs

  • CVE-2026-102805 Medium 6.5 Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow 0.3%
  • CVE-2026-102804 Medium 6.5 Nothings stb stb_hexwave.h hexwave_init integer overflow 0.3%
  • CVE-2026-89266 High 8.2 stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands 0.6%
  • CVE-2026-5317 Medium 6.3 Nothings stb stb_vorbis.c start_decoder out-of-bounds write 0.4%
  • CVE-2026-5316 Medium 4.3 Nothings stb stb_vorbis.c setup_free allocation of resources 0.4%
  • CVE-2026-5315 Medium 4.3 Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds 0.5%
  • CVE-2026-5314 Medium 4.3 Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds 0.7%
  • CVE-2026-5313 Medium 4.3 Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service 0.3%
  • CVE-2026-5186 Medium 5.3 Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free 0.1%
  • CVE-2026-5185 Medium 5.3 Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow 0.2%
  • CVE-2025-3409 Medium 6.3 Nothings stb stb_include_string stack-based overflow 0.5%
  • CVE-2025-3408 Medium 6.3 Nothings stb stb_dupreplace integer overflow 0.5%
  • CVE-2025-3407 Medium 6.3 Nothings stb stbhw_build_tileset_from_image out-of-bounds 0.5%
  • CVE-2025-3406 Medium 4.3 Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds 0.6%
  • CVE-2023-45682 Medium 5.3 Wild address read in vorbis_decode_packet_rest in stb_vorbis 0.6%
  • CVE-2023-45681 High 7.3 Out of bounds heap buffer write in stb_vorbis 0.5%
  • CVE-2023-45680 Medium 5.3 Null pointer dereference in vorbis_deinit in stb_vorbis 0.6%
  • CVE-2023-45679 High 7.3 Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis 0.5%
  • CVE-2023-45678 Medium 6.5 Off-by-one heap buffer write in start_decoder in stb_vorbis 0.7%
  • CVE-2023-45677 High 7.3 Heap buffer out of bounds write in start_decoder in stb_vorbis 0.5%
  • CVE-2023-45676 High 7.3 Multi-byte write heap buffer overflow in start_decoder in stb_vorbis 0.5%
  • CVE-2023-45675 Medium 6.5 0 byte write heap buffer overflow in start_decoder in stb_vorbis 0.7%
  • CVE-2023-45667 Medium 5.3 Null pointer dereference because of an uninitialized variable in stb_image 1.3%
  • CVE-2023-45666 High 7.3 Possible double-free or memory leak in stbi__load_gif_main in stb_image 1.1%
  • CVE-2023-45664 High 7.3 Double-free in stbi__load_gif_main_outofmem in stb_image 0.9%
  • CVE-2023-45663 Medium 5.3 Disclosure of uninitialized memory in stbi__tga_load in stb_image 0.7%
  • CVE-2023-45662 Medium 6.5 Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image 0.8%
  • CVE-2023-45661 Medium 6.5 Wild address read in stbi__gif_load_next in stb_image 0.6%