Double Free Vulnerability in Nothing's Stb Image Library
CVE-2023-43281

6.5MEDIUM

Key Information:

Vendor: Nothings
Status: Stb Image.h
Vendor: CVE Published:; 25 October 2023

What is CVE-2023-43281?

A remote attacker can exploit a double free vulnerability in the Nothing's Stb Image.h library, specifically version 2.28, to craft a malicious file. When processed by the stbi_load_gif_main function, this can lead to a denial of service condition, potentially disrupting software operations that rely on this library.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gist.github.com/peccc/d8761f6ac45ad55cbd194dd7e6f...

https://github.com/peccc/double-stb

https://lists.fedoraproject.org/archives/list/package-ann...

vendor-advisory

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 25, 2023
Vulnerability Reserved
Sep 18, 2023

JSON

Nothings

What is CVE-2023-43281?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.