https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:06:05.250177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06917 bdu:2024-06917 2026-10-07T17:06:05.256103+00:00 bdu:2024-06917 https://cve.radiocsirt.org/vuln/euvd-2026-216895 EUVD-2026-216895 2026-10-07T17:06:05.256138+00:00 EUVD-2026-216895 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45667 fkie_cve-2023-45667 2026-10-07T17:06:05.256152+00:00

stb_image is a single file MIT licensed library for processing images.

If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls `stbi__vertical_flip_slices` with the null pointer result value and the uninitialized `z` value. This may result in a program crash.

 https://cve.radiocsirt.org/vuln/gsd-2023-45667 gsd-2023-45667 2026-10-07T17:06:05.256184+00:00 gsd-2023-45667 https://cve.radiocsirt.org/vuln/oesa-2024-1262 OESA-2024-1262 — stb security update 2026-10-07T17:06:05.256196+00:00

Affected: openEuler:22.03-LTS-SP3: stb

Single-file public domain libraries for C/C++. Security Fix(es): stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about the content of output value `*delays` upon failure. Although it sets `*delays` to zero at the beginning, it doesn’t do it in case the image is not recognized as GIF and a call to `stbi__load_gif_main_outofmem` only frees possibly allocated memory in `*delays` without resetting it to zero. Thus it would be fair to say the caller of `stbi__load_gif_main` is responsible to free the allocated memory in `*delays` only if `stbi__load_gif_main` returns a non null value. However at the same time the function may return null value, but fail to free the memory in `*delays` if internally `stbi__convert_format` is called and fails. Thus the issue may lead to a memory leak if the caller chooses to free `delays` only when `stbi__load_gif_main` didn’t fail or to a double-free if the `delays` is always freed(CVE-2023-45666) stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls `stbi__vertical_flip_slices` with the null pointer result value and the uninitialized `z` value. This may result in a program crash.(CVE-2023-45667)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45667 UBUNTU-CVE-2023-45667 2026-10-07T17:06:05.256230+00:00

Affected: Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb

stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls `stbi__vertical_flip_slices` with the null pointer result value and the uninitialized `z` value. This may result in a program crash.