Nothings records

42 published records for vendor nothings.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 50%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

42 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-47212No exploit	A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22.nothings · stb vorbis.c · CWE-190 Pre-auth Memory safety	Critical9.8	—	1.4%	May 1, 2024
39Monitor	CVE-2023-45666No exploit	Possible double-free or memory leak in stbi__load_gif_main in stb_imagenothings · stb image.h · CWE-415 Pre-auth Memory safety	Critical9.8	—	1.0%	Oct 20, 2023
35Monitor	CVE-2022-28042No exploit	stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.nothings · stb image.h · CWE-416 Pre-auth Memory safety	High8.8	—	1.6%	Apr 15, 2022
35Monitor	CVE-2018-16981No exploit	stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code functionnothings · stb image.h · CWE-787 Pre-auth Memory safety	High8.8	—	1.5%	Sep 12, 2018
35Monitor	CVE-2020-6623No exploit	stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.nothings · stb truetype.h · CWE-617 Pre-auth	High8.8	—	1.4%	Jan 8, 2020
35Monitor	CVE-2020-6622No exploit	stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.nothings · stb truetype.h · CWE-125 Pre-auth Memory safety	High8.8	—	1.4%	Jan 8, 2020
35Monitor	CVE-2019-19777No exploit	stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.nothings · stb image.h · CWE-125 Pre-auth Memory safety	High8.8	—	1.3%	Dec 12, 2019
35Monitor	CVE-2020-6621No exploit	stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.nothings · stb truetype.h · CWE-125 Pre-auth Memory safety	High8.8	—	1.1%	Jan 8, 2020
35Monitor	CVE-2020-6620No exploit	stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.nothings · stb truetype.h · CWE-125 Pre-auth Memory safety	High8.8	—	1.1%	Jan 8, 2020
35Monitor	CVE-2020-6619No exploit	stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.nothings · stb truetype.h · CWE-617 Pre-auth	High8.8	—	1.1%	Jan 8, 2020
35Monitor	CVE-2020-6617No exploit	stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.nothings · stb truetype.h · CWE-617 Pre-auth	High8.8	—	1.1%	Jan 8, 2020
35Monitor	CVE-2020-6618No exploit	stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.nothings · stb truetype.h · CWE-125 Pre-auth Memory safety	High8.8	—	1.1%	Jan 8, 2020
35Monitor	CVE-2023-45664No exploit	Double-free in stbi__load_gif_main_outofmem in stb_imagenothings · stb image.h · CWE-415 Pre-auth Memory safety	High8.8	—	0.9%	Oct 20, 2023
32Monitor	CVE-2023-45662No exploit	Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_imagenothings · stb image.h · CWE-125 Pre-auth Memory safety	High8.1	—	0.8%	Oct 20, 2023
31Monitor	CVE-2023-45678No exploit	Off-by-one heap buffer write in start_decoder in stb_vorbisnothings · stb vorbis.c · CWE-787 Memory safety	High7.8	—	0.7%	Oct 20, 2023
31Monitor	CVE-2023-45675No exploit	0 byte write heap buffer overflow in start_decoder in stb_vorbisnothings · stb vorbis.c · CWE-787 Memory safety	High7.8	—	0.7%	Oct 20, 2023
31Monitor	CVE-2023-45677No exploit	Heap buffer out of bounds write in start_decoder in stb_vorbisnothings · stb vorbis.c · CWE-787 Memory safety	High7.8	—	0.5%	Oct 20, 2023
31Monitor	CVE-2023-45681No exploit	Out of bounds heap buffer write in stb_vorbisnothings · stb vorbis.c · CWE-787 Memory safety	High7.8	—	0.5%	Oct 20, 2023
31Monitor	CVE-2023-45676No exploit	Multi-byte write heap buffer overflow in start_decoder in stb_vorbisnothings · stb vorbis.c · CWE-787 Memory safety	High7.8	—	0.5%	Oct 20, 2023
31Monitor	CVE-2023-45679No exploit	Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbisnothings · stb vorbis.c · CWE-415 Memory safety	High7.8	—	0.5%	Oct 20, 2023
30Monitor	CVE-2023-45667No exploit	Null pointer dereference because of an uninitialized variable in stb_imagenothings · stb image.h · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	1.2%	Oct 20, 2023
30Monitor	CVE-2022-25514No exploit	stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h.nothings · stb truetype.h · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	1.0%	Mar 16, 2022
28Monitor	CVE-2021-42716No exploit	An issue was discovered in stb stb_image.h 2.27.nothings · stb image.h · CWE-120 Memory safety	High7.1	—	1.4%	Oct 21, 2021
28Monitor	CVE-2023-45682No exploit	Wild address read in vorbis_decode_packet_rest in stb_vorbisnothings · stb vorbis.c · CWE-125 Memory safety	High7.1	—	0.5%	Oct 20, 2023
28Monitor	CVE-2023-45661No exploit	Wild address read in stbi__gif_load_next in stb_imagenothings · stb image.h · CWE-125 Memory safety	High7.1	—	0.5%	Oct 20, 2023

CVE-2023-47212
39Monitor
A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb vorbis.cMay 1, 2024
CVE-2023-45666
39Monitor
Possible double-free or memory leak in stbi__load_gif_main in stb_image
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb image.hOct 20, 2023
CVE-2022-28042
35Monitor
stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb image.hApr 15, 2022
CVE-2018-16981
35Monitor
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb image.hSep 12, 2018
CVE-2020-6623
35Monitor
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
nothings · stb truetype.hJan 8, 2020
CVE-2020-6622
35Monitor
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb truetype.hJan 8, 2020
CVE-2019-19777
35Monitor
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb image.hDec 12, 2019
CVE-2020-6621
35Monitor
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb truetype.hJan 8, 2020
CVE-2020-6620
35Monitor
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb truetype.hJan 8, 2020
CVE-2020-6619
35Monitor
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
nothings · stb truetype.hJan 8, 2020
CVE-2020-6617
35Monitor
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
nothings · stb truetype.hJan 8, 2020
CVE-2020-6618
35Monitor
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
nothings · stb truetype.hJan 8, 2020
CVE-2023-45664
35Monitor
Double-free in stbi__load_gif_main_outofmem in stb_image
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
nothings · stb image.hOct 20, 2023
CVE-2023-45662
32Monitor
Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
nothings · stb image.hOct 20, 2023
CVE-2023-45678
31Monitor
Off-by-one heap buffer write in start_decoder in stb_vorbis
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45675
31Monitor
0 byte write heap buffer overflow in start_decoder in stb_vorbis
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45677
31Monitor
Heap buffer out of bounds write in start_decoder in stb_vorbis
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45681
31Monitor
Out of bounds heap buffer write in stb_vorbis
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45676
31Monitor
Multi-byte write heap buffer overflow in start_decoder in stb_vorbis
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45679
31Monitor
Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45667
30Monitor
Null pointer dereference because of an uninitialized variable in stb_image
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
nothings · stb image.hOct 20, 2023
CVE-2022-25514
30Monitor
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
nothings · stb truetype.hMar 16, 2022
CVE-2021-42716
28Monitor
An issue was discovered in stb stb_image.h 2.27.
HighCVSS 7.1No exploitEPSS 1%
- Memory safety
nothings · stb image.hOct 21, 2021
CVE-2023-45682
28Monitor
Wild address read in vorbis_decode_packet_rest in stb_vorbis
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
nothings · stb vorbis.cOct 20, 2023
CVE-2023-45661
28Monitor
Wild address read in stbi__gif_load_next in stb_image
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
nothings · stb image.hOct 20, 2023