en
nothings is Sean Barrett's open-source software project and maintainer identity for the stb collection of single-file libraries in C and C++. Its work covers reusable components for image loading, audio decoding, font rasterization, data structures, and related graphics or game-development functions, distributed for direct integration by developers worldwide.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/19/2026, Nothings recorded 3 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, stb had the most security vulnerabilities in the Nothings ecosystem, with 2 vulnerabilities—approximately 66.67% of the provider's total vulnerabilities during this period.
CVE-2026-102805Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflowCVE-2026-102804Nothings stb stb_hexwave.h hexwave_init integer overflowCVE-2026-89266stb_vorbis through 1.22 heap buffer overflow via codebook multiplicandsCVE-2026-5317Nothings stb stb_vorbis.c start_decoder out-of-bounds writeCVE-2026-5316Nothings stb stb_vorbis.c setup_free allocation of resources48 Results | Page 1 of 5
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |