PT-2026-29655 · Nothings · Stb

D0Razi + 1 · Published 2026-04-02 · Updated 2026-04-02 · CVE-2026-5316

NVD

CVSS v2.0

5.0

Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setup free of the file stb vorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Allocation of Resources Without Limits

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-400

Related Identifiers

CVE-2026-5316

Affected Products

Stb

References · 5

• 🔥 https://gist.github.com/d0razi/cc7f70bba08c1a455d9933e97b8b57c1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5316 · Security Note
• https://vuldb.com/vuln/354648/cti · Note
• https://vuldb.com/submit/780560 · Note
• https://vuldb.com/vuln/354648 · Note