This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-5186 | BDVDB-2026-323819 Detail

Nothingsstb

Description#

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb_image.h of the component Multi-frame GIF File Handler. This manipulation causes double free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-415 Double Free
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.