All issues

Search results

stb_vorbis: heap buffer overflow in comment header parsing (integer truncation in setup_malloc)

Status: Open.

#2005 In nothings/stb;

· AvAl4nch opened on Sep 20, 2026

stb_truetype.h: heap-use-after-free in ttUSHORT via stbtt__GetGlyphShapeTT

Status: Open.

#2002 In nothings/stb;

· KhaledAlsaqabi opened on Sep 10, 2026

stb_image GIF: missing aggregate bounds check on background+history buffers allows ~2.4GB allocation from 64-byte input

Status: Open.

#2001 In nothings/stb;

· sanasimran1403-jpg opened on Sep 10, 2026

Support valueFormat1 == (X_ADVANCE | X_ADVANCE_DEVICE) case in stbtt__GetGlyphGPOSInfoAdvance. Support GPOS table V1.1

1 stb_truetype

4 enhancement

Status: Open.

#1998 In nothings/stb;

· EasyVulkan opened on Sep 7, 2026

stb_truetype: Support lookupType 9 table in stbtt__GetGlyphGPOSInfoAdvance

4 enhancement

Status: Open.

#1997 In nothings/stb;

· EasyVulkan opened on Sep 7, 2026

stb_image.h: 18-byte TGA header forces ~2.1 GB allocation (per-axis STBI_MAX_DIMENSIONS doesn't bound area)

Status: Open.

#1996 In nothings/stb;

· Pawst14 opened on Sep 7, 2026

GIF: unbounded frame count grows memory with no cap

Status: Open.

#1992 In nothings/stb;

· HEBEI77 opened on Sep 6, 2026

stb_image_resize2 unaligned memory

Status: Open.

#1985 In nothings/stb;

· trilowy opened on Aug 6, 2026

missing NULL check in vorbis_deinit

Status: Open.

#1981 In nothings/stb;

· ret2bilibili opened on Jul 29, 2026

STBDS_FREE custom function crashes in certain setups

1 stb_ds

2 bug

Status: Open.

#1978 In nothings/stb;

· NeoKesha opened on Jul 16, 2026

stb_vorbis: inverse_mdct produces garbage output for legal block sizes 64 and 128

1 stb_vorbis

2 bug

Status: Open.

#1977 In nothings/stb;

· ioctlLR opened on Jul 13, 2026

dead links in several files

Status: Open.

#1976 In nothings/stb;

· sleeptightAnsiC opened on Jul 11, 2026