Approved changes feed: RSS · Atom

cpe:2.3:a:nothings:stb_vorbis.c:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNothings (fa9895af-3c4e-566d-93ad-91443ad5c8ab)
ProductStb Vorbis.C (4ad9c013-a4a8-5c1d-b6dc-1e41f63df297)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5317 vulnerable 2026-06-08 08:07:03.548984 Nothings stb stb_vorbis.c start_decoder out-of-bounds write
MEDIUM (6.3)
A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-02T00:45:13.044Z
Updated: 2026-04-02T13:11:56.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5316 vulnerable 2026-06-08 08:07:03.548262 Nothings stb stb_vorbis.c setup_free allocation of resources
MEDIUM (4.3)
A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setup_free of the file stb_vorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-02T00:00:18.137Z
Updated: 2026-04-02T18:24:28.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.