SI
Product
Stb Image.h
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 7Low 0
Watch
Add Stb Image.h to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3409 | 8.8 | Apr 8 | Nothings stb stb_include_string stack-based overflow Affected: through 2.13 |
| CVE-2025-3408 | 8.8 | Apr 8 | Nothings stb stb_dupreplace integer overflow Affected: through 2.13 |
| CVE-2025-3407 | 8.8 | Apr 8 | Nothings stb stbhw_build_tileset_from_image out-of-bounds Affected: through 2.13 |
| CVE-2023-45664 | 8.8 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2022-28042 | 8.8 | Apr 15 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode Affected: 2.27 |
| CVE-2019-19777 | 8.8 | Dec 13 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main Affected: 2.23 |
| CVE-2018-16981 | 8.8 | Sep 12 | stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function Affected: 2.19 |
| CVE-2023-45662 | 8.1 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2023-45667 | 7.5 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2023-45661 | 7.1 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2021-42716 | 7.1 | Oct 21 | An issue was discovered in stb stb_image.h 2.27 Affected: 2.27 |
Showing 11