SI
Product
Stb Image.h
by Nothings · last CVE Apr 8, 2025
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 7Low 0
Watch

Add Stb Image.h to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-3406
6.5
1%
Apr 8
A vulnerability was found in Nothings stb up to f056911
Affected: through 2.13
CVE-2023-43281
6.5
1%
Oct 25
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function
Affected: 2.28
CVE-2022-28041
6.5
2%
Apr 15
stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc
Affected: 2.27
CVE-2019-20056
6.5
1%
Dec 29
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned
Affected: 2.23
CVE-2023-45663
5.5
1%
Oct 21
stb_image is a single file MIT licensed library for processing images
Affected: 2.28
CVE-2023-43898
5.5
0%
Oct 3
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format
Affected: 2.28
CVE-2021-42715
5.5
1%
Oct 21
An issue was discovered in stb stb_image.h 1.33 through 2.27
Affected: 1.33 through 2.27
Showing 7