CVE-2023-43281
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for visp in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
Check your installed stack and versions against the current vulnerability feeds.