PT-2026-29655 · Stb · Stb

D0Razi + 1 · Published 2026-04-02 · Updated 2026-04-30 · CVE-2026-5316

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Nothings stb versions up to 1.22

Description A vulnerability exists in Nothings stb up to version 1.22 related to resource allocation within the setup free function in the stb vorbis.c file. This issue is potentially exploitable remotely. The exploit is publicly available.

Recommendations Versions prior to 1.22: There is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2026-5316

Affected Products

Stb

References · 14

• 🔥 https://gist.github.com/d0razi/cc7f70bba08c1a455d9933e97b8b57c1 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-5316 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5316 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-5316 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-5316 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-5316 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5316 · Security Note
• https://twitter.com/CVEnew/status/2039647720873570583 · Twitter Post
• https://twitter.com/CVEarity/status/2039670615431676266 · Twitter Post
• https://vuldb.com/vuln/354648/cti · Note
• https://t.me/cveNotify/161633 · Telegram Post
• https://twitter.com/cyberbivash/status/2039536491466998243 · Twitter Post
• https://vuldb.com/submit/780560 · Note
• https://vuldb.com/vuln/354648 · Note