Name | CVE-2023-43281 |
Description | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
Potentially a duplicate of CVE-2023-45664, but MITRE decided to not reject as
a separate research done for each does not conclusively show that the vulnerabilities
identified are the same. Instread a note is added that the CVEs might overlap.
Original report: https://github.com/peccc/double-stb