A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setupfree of the file stbvorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function startdecoder of the file stbvorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.

stbimage.h and stbvorbis libraries contain several memory access violations of different severity.