Vulnerabilities > Nothings > High

DATE CVE VULNERABILITY TITLE RISK
2023-10-21 CVE-2023-45682 Out-of-bounds Read vulnerability in Nothings STB Vorbis.C 1.22
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.
local
low complexity
nothings CWE-125
7.1
2022-04-15 CVE-2022-28042 Use After Free vulnerability in multiple products
stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
network
low complexity
nothings fedoraproject debian CWE-416
8.8
2022-03-17 CVE-2022-25514 Out-of-bounds Write vulnerability in Nothings STB Truetype.H 1.26
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h.
network
low complexity
nothings CWE-787
7.5
2021-10-21 CVE-2021-42716 Classic Buffer Overflow vulnerability in multiple products
An issue was discovered in stb stb_image.h 2.27.
local
low complexity
nothings fedoraproject CWE-120
7.1
2018-09-12 CVE-2018-16981 Out-of-bounds Write vulnerability in multiple products
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
network
low complexity
nothings debian CWE-787
8.8