Wild address read in stbi__gif_load_next in stb_image
CVE-2023-45661

6.5MEDIUM

Key Information:

Vendor

Nothings

Status
Stb
Vendor
CVE Published:
21 October 2023

What is CVE-2023-45661?

stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbi__gif_load_next. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation information.

Affected Version(s)

stb <= 2.28

References

https://securitylab.github.com/advisories/GHSL-2023-145_G...
x_refsource_CONFIRM
https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd3...
x_refsource_MISC
https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd3...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.