Medium severity6.5NVD Advisory· Published Sep 30, 2026

CVE-2026-102805

Description

A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the component Image Encoding. Executing a manipulation can lead to integer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Affected products

Nothings/Stbllm-fuzzy
Range: <=1.16

Patches

Vulnerability mechanics

References

github.com/nothings/stb/issues/1964nvd
github.com/nothings/stb/issues/1964nvd
vuldb.com/cve/CVE-2026-102805nvd
vuldb.com/submit/944868nvd
vuldb.com/vuln/411497nvd
vuldb.com/vuln/411497/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000