CVE-2026-89266stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands Exploitation status Not confirmed Fix YesAffected product S stb_vorbis Published 09/11/2026 Severity High CVE-2026-5317Nothings stb stb_vorbis.c start_decoder out-of-bounds write Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 04/02/2026 Severity Medium CVE-2026-5316Nothings stb stb_vorbis.c setup_free allocation of resources Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 04/02/2026 Severity Medium CVE-2026-5315Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 04/01/2026 Severity Medium CVE-2026-5314Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 04/01/2026 Severity Medium CVE-2026-5313Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 04/01/2026 Severity Medium CVE-2026-5186Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free Exploitation status Not known exploited Fix Not confirmed Affected product S stb Published 03/31/2026 Severity Medium CVE-2026-5185Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow Exploitation status Not known exploited Fix Not confirmed Affected product S stb_image Published 03/31/2026 Severity Medium CVE-2025-3409Nothings stb stb_include_string stack-based overflow Exploitation status Not known exploited Fix Not confirmed Affected product S stb Published 04/08/2025 Severity Medium CVE-2025-3408Nothings stb stb_dupreplace integer overflow Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 04/08/2025 Severity Medium CVE-2025-3407Nothings stb stbhw_build_tileset_from_image out-of-bounds Exploitation status Not known exploited Fix Not confirmed Affected product S stb Published 04/08/2025 Severity Medium CVE-2025-3406Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds Exploitation status Not known exploited Fix Not confirmed Affected product S stb Published 04/08/2025 Severity Medium CVE-2023-47212Exploitation status Public exploit Fix Not confirmed Affected product S stb_vorbis.c Published 05/01/2024 Severity Critical CVE-2023-43281Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 10/24/2023 Severity Unknown CVE-2023-45682Wild address read in vorbis_decode_packet_rest in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45681Out of bounds heap buffer write in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity High CVE-2023-45680Null pointer dereference in vorbis_deinit in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45679Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity High CVE-2023-45678Off-by-one heap buffer write in start_decoder in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45677Heap buffer out of bounds write in start_decoder in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity High CVE-2023-45676Multi-byte write heap buffer overflow in start_decoder in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity High CVE-2023-456750 byte write heap buffer overflow in start_decoder in stb_vorbis Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45667Null pointer dereference because of an uninitialized variable in stb_image Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45666Possible double-free or memory leak in stbi__load_gif_main in stb_image Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity High CVE-2023-45664Double-free in stbi__load_gif_main_outofmem in stb_image Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity High CVE-2023-45663Disclosure of uninitialized memory in stbi__tga_load in stb_image Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45662Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-45661Wild address read in stbi__gif_load_next in stb_image Exploitation status Public exploit Fix Not confirmed Affected product S stb Published 10/20/2023 Severity Medium CVE-2023-43898Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 10/03/2023 Severity Medium CVE-2022-28041Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 04/15/2022 Severity Unknown CVE-2022-28042Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 04/15/2022 Severity Unknown CVE-2022-25515Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 03/17/2022 Severity Unknown CVE-2022-25514Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 03/17/2022 Severity Unknown CVE-2022-25516Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 03/17/2022 Severity Unknown CVE-2021-42716Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 10/21/2021 Severity Unknown CVE-2021-42715Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 10/21/2021 Severity Unknown CVE-2020-6617Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2020-6618Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2020-6619Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2020-6620Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2020-6621Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2020-6622Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2020-6623Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/08/2020 Severity Unknown CVE-2019-20056Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 12/29/2019 Severity Unknown CVE-2019-19777Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 12/13/2019 Severity Unknown CVE-2018-16981Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 09/12/2018 Severity Unknown