CVE-2026-5185: Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow
A security flaw has been discovered in Nothings stbimage up to 2.30. This affects the function stbigifloadnext of the file stbimage.h of the component Multi-frame GIF File Handler. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5185?
CVE-2026-5185 is classified with a high severity due to the potential for heap-based overflow vulnerabilities.
How do I fix CVE-2026-5185?
To fix CVE-2026-5185, update Nothings stb_image to version 2.31 or later.
What versions of Nothings stb_image are affected by CVE-2026-5185?
Nothings stb_image versions up to and including 2.30 are affected by CVE-2026-5185.
What is the impact of CVE-2026-5185?
CVE-2026-5185 may allow attackers to exploit the heap-based overflow to execute arbitrary code.
Where can I find more information about CVE-2026-5185?
Detailed information about CVE-2026-5185 can typically be found in security advisories and vulnerability databases.