PatchFirst · Свежие уязвимости
За последние 30 дней в goxel опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 5
tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file.
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.