CVE-2026-5185

Name of the Vulnerable Software and Affected Versions stb image versions prior to 2.31

Description A flaw exists in Nothings stb image, specifically within the Multi-frame GIF File Handler component. The issue resides in the stbi gif load next function of the stb image.h file and results in a heap-based buffer overflow. Exploitation requires local access. The exploit has been publicly released. The vendor was notified but did not respond.

Recommendations Update to a version prior to 2.31. As a temporary workaround, consider restricting the use of the Multi-frame GIF File Handler component until a patch is available.