CVE-2026-102804

Name of the Vulnerable Software and Affected Versions Nothings stb versions prior to 2c980bb59875b0d32144a71867fbdebb2f77cd20

Description An integer overflow occurs in the hexwave init() function within the stb hexwave.h library when the width/oversample argument is manipulated. This flaw allows for remote exploitation.

Recommendations As a temporary workaround, restrict the use of the hexwave init() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.