SI
Product
Stb Image.h
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 7Low 0
Watch
Add Stb Image.h to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3406 | 6.5 | Apr 8 | A vulnerability was found in Nothings stb up to f056911 Affected: through 2.13 |
| CVE-2023-43281 | 6.5 | Oct 25 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function Affected: 2.28 |
| CVE-2022-28041 | 6.5 | Apr 15 | stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc Affected: 2.27 |
| CVE-2019-20056 | 6.5 | Dec 29 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned Affected: 2.23 |
| CVE-2023-45663 | 5.5 | Oct 21 | stb_image is a single file MIT licensed library for processing images Affected: 2.28 |
| CVE-2023-43898 | 5.5 | Oct 3 | Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format Affected: 2.28 |
| CVE-2021-42715 | 5.5 | Oct 21 | An issue was discovered in stb stb_image.h 1.33 through 2.27 Affected: 1.33 through 2.27 |
Showing 7
