GHSL-2023-165: GHSL-2023-145_GHSL-2023-151/GHSL-2023-165_GHSL-2023-172: Several memory access violations in stb_image and stb_vorbis
Published Oct 19, 2023
·Updated
stbimage.h and stbvorbis libraries contain several memory access violations of different severity.
Affected Software
2 affected components
stb stb_image
stb stb_vorbis
Event History
Oct 19, 2023
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of GHSL-2023-165?
GHSL-2023-165 has a risk level of 47, indicating a moderate severity of the vulnerabilities.
2
How do I fix GHSL-2023-165?
To fix GHSL-2023-165, update to the latest stable version of the stb_image and stb_vorbis libraries where the vulnerabilities have been addressed.
3
What are the consequences of not addressing GHSL-2023-165?
Failure to address GHSL-2023-165 may lead to potential memory access violations that could result in crashes or exploitation of the application using these libraries.
4
Which libraries are affected by GHSL-2023-165?
GHSL-2023-165 affects the stb_image and stb_vorbis libraries within the stb framework.
5
When was GHSL-2023-165 published?
GHSL-2023-165 was published on October 19, 2023.