Medium severity5.5NVD Advisory· Published Oct 3, 2023· Updated Jun 17, 2026

CVE-2023-43898

Description

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nothings/Stb Image.h
cpe:2.3:a:nothings:stb_image.h:2.28:*:*:*:*:*:*:*
Nothings/Stbcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =2.28

Patches

Vulnerability mechanics

References

github.com/nothings/stb/pull/1454nvdIssue TrackingPatch
github.com/nothings/stb/issues/1452nvdExploitIssue TrackingPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000