CVE-2026-102805
EUVD-2026-8953630.09.2026, 01:16
A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the component Image Encoding. Executing a manipulation can lead to integer overflow. The attack can be executed remotely. The exploit has been published and may be used.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| nothings | stb | 1.0 | CNA |
| nothings | stb | 1.1 | CNA |
| nothings | stb | 1.2 | CNA |
| nothings | stb | 1.3 | CNA |
| nothings | stb | 1.4 | CNA |
| nothings | stb | 1.5 | CNA |
| nothings | stb | 1.6 | CNA |
| nothings | stb | 1.7 | CNA |
| nothings | stb | 1.8 | CNA |
| nothings | stb | 1.9 | CNA |
| nothings | stb | 1.10 | CNA |
| nothings | stb | 1.11 | CNA |
| nothings | stb | 1.12 | CNA |
| nothings | stb | 1.13 | CNA |
| nothings | stb | 1.14 | CNA |
| nothings | stb | 1.15 | CNA |
| nothings | stb | 1.16 | CNA |
Debian Releases
Ubuntu Releases
Common Weakness Enumeration