CVE-2023-43281: Nothings Stb Image.h

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.

Affected products

• Nothings Stb Image.h: version 2.28 only

Published 2023-10-25. Last modified 2026-06-17.