What’s Vulnerable › Products

nothings stb vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your nothings stb version is affected

Latest nothings stb vulnerabilities

• CVE-2026-102805 — Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow (CVSS 6.5)
• CVE-2026-102804 — Nothings stb stb_hexwave.h hexwave_init integer overflow (CVSS 6.5)
• CVE-2026-5313 — Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service (CVSS 4.3)
• CVE-2026-5186 — Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free (CVSS 5.3)
• CVE-2025-3409 — Nothings stb stb_include_string stack-based overflow (CVSS 8.8)
• CVE-2025-3408 — Nothings stb stb_dupreplace integer overflow (CVSS 8.8)
• CVE-2025-3407 — Nothings stb stbhw_build_tileset_from_image out-of-bounds (CVSS 8.8)
• CVE-2025-3406 — Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds (CVSS 6.5)
• CVE-2023-43281 — (CVSS 6.5)
• CVE-2023-45667 — Null pointer dereference because of an uninitialized variable in stb_image (CVSS 7.5)
• CVE-2023-45666 — Possible double-free or memory leak in stbi__load_gif_main in stb_image (CVSS 9.8)
• CVE-2023-45664 — Double-free in stbi__load_gif_main_outofmem in stb_image (CVSS 8.8)
• CVE-2023-45663 — Disclosure of uninitialized memory in stbi__tga_load in stb_image (CVSS 5.5)
• CVE-2023-45662 — Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image (CVSS 8.1)
• CVE-2023-45661 — Wild address read in stbi__gif_load_next in stb_image (CVSS 7.1)
• CVE-2023-43898 — (CVSS 5.5)
• CVE-2022-28042 — (CVSS 8.8)
• CVE-2022-28041 — (CVSS 6.5)
• CVE-2021-42716 — (CVSS 7.1)
• CVE-2021-42715 — (CVSS 5.5)
• CVE-2019-20056 — (CVSS 6.5)
• CVE-2019-19777 — (CVSS 8.8)
• CVE-2018-16981 — (CVSS 8.8)