CVE-2023-45664: GHSL-2023-145_GHSL-2023-151/GHSL-2023-165_GHSL-2023-172: Several memory access violations in stb_image and stb_vorbis
stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common that realloc frees the old memory and returns null pointer. Since it attempts to double-free the memory a few lines below the first “free”, the issue can be potentially exploited only in a multi-threaded environment. In the worst case this may lead to code execution.
Other sources
stbimage.h and stbvorbis libraries contain several memory access violations of different severity.
— GitHub Security Lab
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-45664?
CVE-2023-45664 is a vulnerability in the stb_image library that can be triggered by a crafted image file, resulting in an attempt to double-free the out variable.
How severe is CVE-2023-45664?
CVE-2023-45664 has a severity score of 8.8, which is considered high.
What software is affected by CVE-2023-45664?
The affected software is Nothings Stb Image.h version 2.28.
How can I fix CVE-2023-45664?
To fix CVE-2023-45664, update to a version of the stb_image library that is not affected by the vulnerability.
Where can I find more information about CVE-2023-45664?
More information about CVE-2023-45664 can be found in the GitHub Security Lab advisory and the stb_image library's GitHub repository.