CVE-2023-45662: GHSL-2023-145_GHSL-2023-151/GHSL-2023-165_GHSL-2023-172: Several memory access violations in stb_image and stb_vorbis
stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to flip the image vertically. A crafted image file can trigger memcpy out-of-bounds read because bytesperpixel used to calculate bytesperrow doesn’t match the real image array dimensions.
Other sources
stbimage.h and stbvorbis libraries contain several memory access violations of different severity.
— GitHub Security Lab
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-45662.
What is the severity rating for CVE-2023-45662?
The severity rating for CVE-2023-45662 is high with a score of 8.1.
What is affected by CVE-2023-45662?
The affected software is Nothings Stb Image.h version 2.28.
How does CVE-2023-45662 occur?
CVE-2023-45662 occurs when the stbi_set_flip_vertically_on_load function is set to TRUE and req_comp is set to a number that doesn't match the real number of components per pixel.
How can CVE-2023-45662 be exploited?
CVE-2023-45662 can be exploited by using a crafted image file that triggers a multi-byte read heap buffer overflow in the stbi__vertical_flip function of stb_image library.