NO
Vendor
Nothings
52
CVEs
0
On KEV
2
New 30D
Products
ST8.8
stb
Nothings
8 CVEs0 on KEV2 new
SI9.8
Stb Image.h
Nothings
19 CVEs0 on KEV0 new
ST8.8
Stb Truetype.h
Nothings
12 CVEs0 on KEV0 new
SV9.8
Stb Vorbis.c
Nothings
11 CVEs0 on KEV0 new
ST5.3
stb_image
Nothings
1 CVEs0 on KEV0 new
ST8.2
stb_vorbis
nothings
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102805 | ST stb Nothings | 6.5 | Sep 30 | Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow |
| CVE-2026-102804 | ST stb Nothings | 6.5 | Sep 30 | Nothings stb stb_hexwave.h hexwave_init integer overflow |
| CVE-2026-89266 | ST stb_vorbis nothings | 8.2 | Sep 11 | stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands |
| CVE-2026-5317 | ST stb Nothings | 8.8 | Apr 2 | Nothings stb stb_vorbis.c start_decoder out-of-bounds write |
| CVE-2026-5316 | ST stb Nothings | 6.5 | Apr 2 | Nothings stb stb_vorbis.c setup_free allocation of resources |
| CVE-2026-5315 | ST stb Nothings | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds |
| CVE-2026-5314 | ST stb Nothings | 8.8 | Apr 1 | Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds |
| CVE-2026-5313 | ST stb Nothings | 4.3 | Apr 1 | Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service |
| CVE-2026-5186 | ST stb Nothings | 5.3 | Mar 31 | Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free |
| CVE-2026-5185 | ST stb_image Nothings | 5.3 | Mar 31 | Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow |
| CVE-2025-3409 | SI Stb Image.h Nothings | 8.8 | Apr 8 | A vulnerability classified as critical has been found in Nothings stb up to f056911 |
| CVE-2025-3408 | SI Stb Image.h Nothings | 8.8 | Apr 8 | A vulnerability was found in Nothings stb up to f056911 |
| CVE-2025-3407 | SI Stb Image.h Nothings | 8.8 | Apr 8 | A vulnerability was found in Nothings stb up to f056911 |
| CVE-2025-3406 | SI Stb Image.h Nothings | 6.5 | Apr 8 | A vulnerability was found in Nothings stb up to f056911 |
| CVE-2023-47212 | SV Stb Vorbis.c Nothings | 9.8 | May 1 | A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22 |
| CVE-2023-43281 | SI Stb Image.h Nothings | 6.5 | Oct 25 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function |
| CVE-2023-45682 | SV Stb Vorbis.c Nothings | 7.1 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45681 | SV Stb Vorbis.c Nothings | 7.8 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45680 | SV Stb Vorbis.c Nothings | 5.5 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45679 | SV Stb Vorbis.c Nothings | 7.8 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45678 | SV Stb Vorbis.c Nothings | 7.8 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45677 | SV Stb Vorbis.c Nothings | 7.8 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45676 | SV Stb Vorbis.c Nothings | 7.8 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45675 | SV Stb Vorbis.c Nothings | 7.8 | Oct 21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files |
| CVE-2023-45667 | SI Stb Image.h Nothings | 7.5 | Oct 21 | stb_image is a single file MIT licensed library for processing images |
| CVE-2023-45666 | SI Stb Image.h Nothings | 9.8 | Oct 21 | stb_image is a single file MIT licensed library for processing images |
| CVE-2023-45664 | SI Stb Image.h Nothings | 8.8 | Oct 21 | stb_image is a single file MIT licensed library for processing images |
| CVE-2023-45663 | SI Stb Image.h Nothings | 5.5 | Oct 21 | stb_image is a single file MIT licensed library for processing images |
| CVE-2023-45662 | SI Stb Image.h Nothings | 8.1 | Oct 21 | stb_image is a single file MIT licensed library for processing images |
| CVE-2023-45661 | SI Stb Image.h Nothings | 7.1 | Oct 21 | stb_image is a single file MIT licensed library for processing images |
| CVE-2023-43898 | SI Stb Image.h Nothings | 5.5 | Oct 3 | Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format |
| CVE-2022-28042 | SI Stb Image.h Nothings | 8.8 | Apr 15 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode |
| CVE-2022-28041 | SI Stb Image.h Nothings | 6.5 | Apr 15 | stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc |
| CVE-2022-25516 | ST Stb Truetype.h Nothings | 6.5 | Mar 17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h |
| CVE-2022-25515 | ST Stb Truetype.h Nothings | 6.5 | Mar 17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h |
| CVE-2022-25514 | ST Stb Truetype.h Nothings | 7.5 | Mar 17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h |
| CVE-2021-42716 | SI Stb Image.h Nothings | 7.1 | Oct 21 | An issue was discovered in stb stb_image.h 2.27 |
| CVE-2021-42715 | SI Stb Image.h Nothings | 5.5 | Oct 21 | An issue was discovered in stb stb_image.h 1.33 through 2.27 |
| CVE-2020-6623 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index |
| CVE-2020-6622 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8 |
| CVE-2020-6621 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT |
| CVE-2020-6620 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8 |
| CVE-2020-6619 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek |
| CVE-2020-6618 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table |
| CVE-2020-6617 | ST Stb Truetype.h Nothings | 8.8 | Jan 8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int |
| CVE-2019-20056 | SI Stb Image.h Nothings | 6.5 | Dec 29 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned |
| CVE-2019-19777 | SI Stb Image.h Nothings | 8.8 | Dec 13 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main |
| CVE-2018-16981 | SI Stb Image.h Nothings | 8.8 | Sep 12 | stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function |
