CVE-2023-45661mediumCWE-125

CVE-2023-45661: falha de média gravidade em nothings stb

Wild address read in stbi__gif_load_next in stb_image

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar stb+ Monitorar libstb

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.6%
stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Produtos afetados
nothings · stb
CVEs relacionadas — nothings stb

No mesmo produto, das mais perigosas para as menos.

CVE-2023-45667MEDIUMNull pointer dereference because of an uninitialized variable in stb_imageEPSS 1.3%CVE-2023-45666HIGHPossible double-free or memory leak in stbi__load_gif_main in stb_imageEPSS 1.1%CVE-2023-45664HIGHDouble-free in stbi__load_gif_main_outofmem in stb_imageEPSS 0.9%CVE-2023-45662MEDIUMMulti-byte read heap buffer overflow in stbi__vertical_flip in stb_imageEPSS 0.8%CVE-2023-45678MEDIUMOff-by-one heap buffer write in start_decoder in stb_vorbisEPSS 0.7%CVE-2023-45675MEDIUM0 byte write heap buffer overflow in start_decoder in stb_vorbisEPSS 0.7%