Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5317

Опубликовано: 02 апр. 2026
Источник: nvd
CVSS3: 6.3
CVSS3: 8.8
CVSS2: 7.5
EPSS Низкий

Описание

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nothings:stb_vorbis.c:*:*:*:*:*:*:*:*
Версия до 1.22 (включая)

EPSS

Процентиль: 14%
0.00047
Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.3
ubuntu
около 1 месяца назад

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.3
redhat
около 1 месяца назад

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.3
debian
около 1 месяца назад

A security flaw has been discovered in Nothings stb up to 1.22. This a ...

CVSS3: 6.3
github
около 1 месяца назад

A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 14%
0.00047
Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119