Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-102805

Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the component Image Encoding. Executing a manipulation can lead to integer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nothings stb

  • 1.0affected
  • 1.1affected
  • 1.2affected
  • 1.3affected
  • 1.4affected
  • 1.5affected
  • 1.6affected
  • 1.7affected
  • 1.8affected
  • 1.9affected
  • 1.10affected
  • 1.11affected
  • 1.12affected
  • 1.13affected
  • 1.14affected
  • 1.15affected
  • 1.16affected

References