Wild address read in stbi__gif_load_next in stb_image
CVE-2023-45661

6.5MEDIUM

Key Information:

Vendor: Nothings
Status: Stb
Vendor: CVE Published:; 21 October 2023

What is CVE-2023-45661?

stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbi__gif_load_next. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch