{"id":"CVE-2026-102805","published":"2026-09-30T01:16:36.187","lastModified":"2026-09-30T01:16:36.187","description":"A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the component Image Encoding. Executing a manipulation can lead to integer overflow. The attack can be executed remotely. The exploit has been published and may be used.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwes":["CWE-189","CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://github.com/nothings/stb/","tags":[]},{"url":"https://github.com/nothings/stb/issues/1964","tags":[]},{"url":"https://github.com/nothings/stb/issues/1964#issuecomment-5404606996","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-102805","tags":[]},{"url":"https://vuldb.com/submit/944868","tags":[]},{"url":"https://vuldb.com/vuln/411497","tags":[]},{"url":"https://vuldb.com/vuln/411497/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/nothings/stb/","tags":[]},{"url":"https://github.com/nothings/stb/issues/1964","tags":[]},{"url":"https://github.com/nothings/stb/issues/1964#issuecomment-5404606996","tags":[]}],"hasPoc":true,"ai":null}