Search results

stb_truetype: heap buffer overflow write in stbtt_PackFontRangesRenderIntoRects

Status: Open.

#1953 In nothings/stb;

· Zer0-red opened on May 15, 2026

stb_image: NULL pointer dereference in PIC loader via stbi__convert_format

Status: Open.

#1952 In nothings/stb;

· Zer0-red opened on May 12, 2026

stb_image: signed integer undefined behavior in BMP loader when negating INT_MIN height

Status: Open.

#1950 In nothings/stb;

· Zer0-red opened on May 11, 2026

Chained signed-integer overflow in stb_vorbis codebook setup and codebook_decode enables out-of-bounds heap read from a crafted Ogg Vorbis file

Status: Open.

#1949 In nothings/stb;

· TrekLaps opened on May 11, 2026

Heap buffer overflow via size_t-to-int truncation in stb_vorbis setup_malloc (codebook multiplicands)

Status: Open.

#1947 In nothings/stb;

· Tomer-PL opened on May 10, 2026

thread_local variables not zero-initialized when DLL is loaded via injection (causes random vertical flip)

1 stb_image

Status: Open.

#1946 In nothings/stb;

· KyuuChiaki opened on May 5, 2026

stb_image: integer overflow in 3 pixel-format conversion allocations

Status: Open.

#1936 In nothings/stb;

· JorgeBarredo14 opened on Apr 14, 2026

stb_image: stack overflow in GIF decoder via deep LZW prefix chain

Status: Open.

#1935 In nothings/stb;

· JorgeBarredo14 opened on Apr 14, 2026

stb_vorbis: incomplete fix for CVE-2019-13220 in floor1 decode

1 stb_vorbis

2 bug

Status: Open.

#1934 In nothings/stb;

· Medoedus opened on Apr 10, 2026

stb_vorbis: integer overflow in codebook multiplicands allocation

Status: Open.

#1933 In nothings/stb;

· Medoedus opened on Apr 10, 2026

stb_image: integer overflow in stbi__convert_format16 allocation

Status: Open.

#1932 In nothings/stb;

· Medoedus opened on Apr 10, 2026

stb_include: path traversal via #include reads arbitrary files

Status: Open.

#1931 In nothings/stb;

· Medoedus opened on Apr 10, 2026