Skip to content
OpenAdvisories
High DLA-3305-1 13 CVEs

libstb - security update

Published Jan 31, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libstb 0.0~git20180212.15.e6afb9c-1+deb10u1

Vulnerabilities 13

  • High 8.1

    stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Servic…

  • Unscored —

    stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__…

  • Unscored —

    A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a den…

  • Unscored —

    Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of…

  • Unscored —

    A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a de…

  • Unscored —

    Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker …

  • Unscored —

    A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause …

  • Unscored —

    An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker …

  • Unscored —

    A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a den…

  • Unscored —

    Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

  • Unscored —

    An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines…

  • Unscored —

    stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This …

  • Unscored —

    stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.