Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2023-45663
Good to know:
Date: October 20, 2023
stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typically a file) into the specified buffer. In case the file stream points to the end, it returns zero. There are two places where its return value is not checked: In the `stbi__hdr_load` function and in the `stbi__tga_load` function. The latter of the two is likely more exploitable as an attacker may also control the size of an uninitialized buffer.
Language: C
Severity Score
Related Resources (9)
Severity Score
Weakness Type (CWE)
Use of Uninitialized Resource
CWE-908Top Fix
Upgrade Version
Upgrade to version Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.linux-musl-x64 - no_fix;sixel-sys - 0.5.0;Microsoft.NET.Runtime.Emscripten.2.0.23.Sdk.linux-x64 - no_fix;nanovg-sys - 1.0.0;nanovg-sys - no_fix;libktx-rs-sys - no_fix;ffui - no_fix;raylib-ffi - 5.5.0;image2 - 0.11.3;tracy-client-sys - 0.14.0;raylib-sys - 3.5.0;raylib-sys - 5.5.0;diffusion-rs-sys - 0.1.4;diffusion-rs-sys - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.30.Sdk.osx-x64 - no_fix;sixel-sys-static - no_fix;escapi - no_fix;chrono - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.21.Sdk.linux-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.30.Sdk.win-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.12.Sdk.linux-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.12.Sdk.osx-x64 - no_fix;astcenc-sys - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.21.Sdk.osx-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.30.Sdk.linux-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.linux-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.12.Sdk.win-x64 - no_fix;darknet - 0.3.1;darknet - 0.3.5;stb-sys - no_fix;torch-sys - no_fix;bgfx-sys - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.7.Sdk.win-x64 - no_fix;apollo-hyper-libretro-core-beetle-psx - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.12.Sdk.linux-x64 - no_fix;fastwfc-sys - no_fix;ivy-image - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.7.Sdk.linux-x64 - no_fix;nuklear-sys - 1.33.0;nvtt_sys - 0.5.0;tgl - 0.1.1;libktx-sys2 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.osx-arm64 - no_fix;mario-deluna/php-glfw - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.osx-x64 - no_fix;sfml - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.linux-arm64 - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.23.Sdk.osx-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.23.Sdk.win-x64 - no_fix;tinygltf - 2.8.1;soloud-sys - 1.0.1;autogenerated-assimp-sys - no_fix;apollo-hyper-libretro-core-beetle-ngb - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.21.Sdk.win-x64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.7.Sdk.osx-x64 - no_fix;wfc-rs - no_fix;webots-bindings - no_fix;darknet-sys - no_fix;emscripten - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.linux-musl-arm64 - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.win-x64 - no_fix;sstar - no_fix;vuk - no_fix;Microsoft.NET.Runtime.Emscripten.3.1.34.Sdk.win-arm64 - no_fix;ncnn-sys - 0.1.7;Microsoft.NET.Runtime.Emscripten.3.1.12.Sdk.win-x64 - no_fix;renderkit - no_fix;Microsoft.NET.Runtime.Emscripten.2.0.12.Sdk.osx-x64 - no_fix;torch-build - no_fix;com.basemark.rocksolidsdk - 0.1.5;nuki-sys - no_fix;mlpack - 4.0.1
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | NONE |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | NONE |
| Availability (A): | NONE |