CVE-2025-3409
Nothings stb stb_include_string stack-based overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Nothings stb stb_include_string stack-based overflow
A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argument path_to_includes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
Es wurde eine Schwachstelle in Nothings stb bis f056911 entdeckt. Sie wurde als kritisch eingestuft. Es geht dabei um die Funktion stb_include_string. Durch Beeinflussen des Arguments path_to_includes mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Dieses Produkt setzt Rolling Releases ein. Aus diesem Grund sind Details zu betroffenen oder zu aktualisierende Versionen nicht verfügbar.
| 2025-04-07: | Advisory disclosed |
| 2025-04-07: | VulDB entry created |
| 2025-04-07: | VulDB entry last update |
ninpwn (VulDB User)
vuldb.com/?id.303687 (VDB-303687 | Nothings stb stb_include_string stack-based overflow)
vuldb.com/?ctiid.303687 (VDB-303687 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.544231 (Submit #544231 | Open Source STB Project (https://github.com/nothings/stb) Latest (<= commit f056911) stb_include_string Stack Buffer Overflow)
Support options
