GitHub Advisoryadvisory · crates.io

GHSA-ppjr-267j-5p9x NULL pointer derefernce in `stb_image`

MEDIUM Published 2023-03-20 Modified 2023-07-19 Official page ↗
Ecosystem
crates.io
Packages
stb_image
Severity
Moderate
Weaknesses
CWE-476
Reviewed
2023-03-20

Affected packages

• crates.io stb_image: < 0.2.5 → fixed in 0.2.5

Description

A bug in error handling in the `stb_image` C library could cause a NULL pointer dereference when attempting to load an invalid or unsupported image file. This is fixed in version 0.2.5 and later of the `stb_image` Rust crate, by patching the C code to correctly handle NULL pointers.

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References