NA

CVE-2023-43898

Published: 03/10/2023 Updated: 24/01/2024
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

Nothings stb 2.28 exists to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows malicious users to cause a Denial of Service (DoS) via a crafted pic file.

Vulnerable Product Search on Vulmon Subscribe to Product

nothings stb image.h 2.28

Vendor Advisories

Debian Bug report logs - #1053627 libstb: CVE-2023-43898 Package: src:libstb; Maintainer for src:libstb is Yangfl <mmyangfl@gmailcom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 7 Oct 2023 15:03:01 UTC Severity: important Tags: security, upstream Found in version libstb/00~git202301295736b1 ...