PatchFirst · Latest vulnerabilities
Vulnerabilities published for goxel in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 5
tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file.
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
Check your installed stack and versions against the current vulnerability feeds.