medium6.5
CVE-2026-102805
A flaw has been found in Nothings stb up to 1.16.
Impact
A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the component Image Encoding. Executing a manipulation can lead to integer overflow. The attack can be executed remotely. The exploit has been published and may be used.
Affected products
| Product | Affected versions |
|---|---|
| Nothings Stb | before 1.16. |
Versions were read from the advisory text. No structured product data has been published for this record yet.