Approved changes feed: RSS · Atom
cpe:2.3:a:raylib:raylib:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Raylib (d8eb75a0-ed6e-5eac-9c59-296da5bc14e2) |
|---|---|
| Product | Raylib (b9e6b37c-1929-5065-a6bb-c9f92148dcec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/raysan5/raylib |
purl2cpe | 2026-06-01 10:13:10.479518 |
pkg:golang/github.com/raysan5/raylib |
purl2cpe | 2026-06-01 10:13:10.479520 |
pkg:rpm/opensuse/raylib |
purl2cpe | 2026-06-01 10:13:10.479521 |
pkg:sourceforge/raylib.mirror |
purl2cpe | 2026-06-01 10:13:10.479522 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15534 |
vulnerable | 2026-06-08 07:06:36.397615 |
raysan5 raylib rtext.c LoadFontData integer overflow
MEDIUM (5.3)
A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The identifier of the patch is 5a3391fdce046bc5473e52afbd835dd2dc127146. It is suggested to install a patch to address this issue.
Published: 2026-01-18T06:32:06.449Z
Updated: 2026-02-23T08:36:56.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15533 |
vulnerable | 2026-06-08 07:06:36.397117 |
raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow
MEDIUM (5.3)
A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called 5a3391fdce046bc5473e52afbd835dd2dc127146. Applying a patch is advised to resolve this issue.
Published: 2026-01-18T05:02:08.672Z
Updated: 2026-02-23T08:36:44.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26123 |
vulnerable | 2026-06-08 05:57:38.666448 |
Details available
MEDIUM (6.1)
Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscripten_run_script function.
**Note:** This vulnerability is present only when compiling raylib for PLATFORM_WEB. All the other Desktop/Mobile/Embedded platforms are not affected.
Published: 2023-04-14T05:00:01.188Z
Updated: 2025-02-06T20:42:47.318Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.