CVE-2023-43281
CVE-2023-43281
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
CVSS 6.5 · Medium · EPSS 1.0%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
emscripten Ubuntu:16.04:LTS
- Versions
- 1.22.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libsfml Ubuntu:16.04:LTS
- Versions
- 2.3.2+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
love Ubuntu:16.04:LTS
- Versions
- 0.9.1-3ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
visp Ubuntu:16.04:LTS
- Versions
- 2.10.0-4build3
- 2.10.0+dfsg-1
- 2.10.0+dfsg-1build1
- 2.10.0+dfsg-1build2
- 2.10.0+dfsg-2
- 3.0.0-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bibledit Ubuntu:18.04:LTS
- Versions
- 5.0.145-1
- 5.0.331-1
- 5.0.446-1
- 5.0.453-1
- 5.0.453-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
emscripten Ubuntu:18.04:LTS
- Versions
- 1.22.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
goxel Ubuntu:18.04:LTS
- Versions
- 0.7.1-2
- 0.7.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libsfml Ubuntu:18.04:LTS
- Versions
- 2.4.2+dfsg-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
love Ubuntu:18.04:LTS
- Versions
- 0.9.1-4ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
visp Ubuntu:18.04:LTS
- Versions
- 3.0.1-2ubuntu2
- 3.0.1-2ubuntu4
- 3.1.0-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bibledit Ubuntu:20.04:LTS
- Versions
- 5.0.764-1
- 5.0.764-2
- 5.0.807-1
- 5.0.808-1
- 5.0.811-1
- 5.0.811-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bibledit-cloud Ubuntu:20.04:LTS
- Versions
- 5.0.801-1
- 5.0.813-1
- 5.0.813-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
goxel Ubuntu:20.04:LTS
- Versions
- 0.8.1-1
- 0.8.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libsfml Ubuntu:20.04:LTS
- Versions
- 2.5.1+dfsg-1
- 2.5.1+dfsg-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libstb Ubuntu:20.04:LTS
- Versions
- 0.0~git20190817.1.052dce1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
love Ubuntu:20.04:LTS
- Versions
- 11.1-2
- 11.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
utox Ubuntu:20.04:LTS
- Versions
- 0.17.0-1build2
- 0.17.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-compute-library Ubuntu:22.04:LTS
- Versions
- 20.08+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
armnn Ubuntu:22.04:LTS
- Versions
- 20.08-9
- 20.08-10
- 20.08-10build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bibledit Ubuntu:22.04:LTS
- Versions
- 5.0.922-1
- 5.0.964-1
- 5.0.964-2
- 5.0.978-1
- 5.0.978-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bibledit-cloud Ubuntu:22.04:LTS
- Versions
- 5.0.922-1build1
- 5.0.964-3
- 5.0.977-1
- 5.0.978-1
- 5.0.978-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
emscripten Ubuntu:22.04:LTS
- Versions
- 2.0.13~dfsg-1
- 3.1.1~dfsg+~1.39.6-5ubuntu4
- 3.1.2~dfsg+~1.39.6-6ubuntu1
- 3.1.3~dfsg-4ubuntu1
- 3.1.3~dfsg-5ubuntu1
- 3.1.4~dfsg-7ubuntu1
- 3.1.5~dfsg-3ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
goxel Ubuntu:22.04:LTS
- Versions
- 0.10.6-3
- 0.10.8-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://gist.github.com/peccc/d8761f6ac45ad55cbd194dd7e6fdfdac
- https://github.com/peccc/double-stb
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVABVF4GEM6BYD5L4L64RCRSXUHY6LGN/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMXKOKPP4BKTNUTF5KSRDQAWOUILQZNO/
- https://nvd.nist.gov/vuln/detail/CVE-2023-43281