ZeroHour

CVE-2023-43898

PoC ×2
CVSS 3.1
5.5 medium
EPSS
<1%p23
Published
()
Modified
Description

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

Vendors
nothings
Products
stb image.h
Weakness
CWE-476
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.