CVE-2026-5316: Nothings stb stb_vorbis.c setup_free allocation of resources
A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setupfree of the file stbvorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5316?
CVE-2026-5316 is considered to have a critical severity due to the potential for resource allocation vulnerabilities that can be exploited remotely.
How do I fix CVE-2026-5316?
To fix CVE-2026-5316, users should upgrade Nothings stb to version 1.23 or later where the vulnerability has been addressed.
What systems are affected by CVE-2026-5316?
CVE-2026-5316 affects Nothings stb versions up to and including 1.22.
Can CVE-2026-5316 be exploited remotely?
Yes, CVE-2026-5316 can be exploited remotely, allowing attackers to manipulate resource allocation.
What type of vulnerability is CVE-2026-5316?
CVE-2026-5316 is a resource allocation vulnerability found in the setup_free function of stb_vorbis.c.