https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:46:05.632620+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-5186 BELL-CVE-2026-5186 2026-10-02T17:46:05.714806+00:00

Affected: Alpaquita:23: stb, Alpaquita:25: stb, Alpaquita:stream: stb

 https://cve.radiocsirt.org/vuln/euvd-2026-278298 EUVD-2026-278298 2026-10-02T17:46:05.714871+00:00 EUVD-2026-278298 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5186 fkie_cve-2026-5186 2026-10-02T17:46:05.714894+00:00

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb_image.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-593x-hf83-hmrv GHSA-593x-hf83-hmrv 2026-10-02T17:46:05.714944+00:00

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb_image.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5186 UBUNTU-CVE-2026-5186 2026-10-02T17:46:05.714963+00:00

Affected: Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb_image.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.