Jerrygw

**Name of the Vulnerable Software and Affected Versions** Nothings stb versions prior to 2c980bb59875b0d32144a71867fbdebb2f77cd20 **Description** An integer overflow occurs in the `hexwave init()` function within the `stb hexwave.h` library when the `width`/`oversample` argument is manipulated. This flaw allows for remote exploitation. **Recommendations** As a temporary workaround, restrict the use of the `hexwave init()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nothings stb versions prior to 1.17 **Description** A flaw in the Image Encoding component of the `stb image write.h` library allows for a remote attack. The issue resides in the `stbi write png to mem()`, `stbi write jpg core()`, and `stbi write tga core()` functions, where a manipulation can lead to an integer overflow, a condition where an arithmetic operation results in a value that exceeds the storage capacity of the integer type. **Recommendations** Update Nothings stb to version 1.17 or later. As a temporary workaround, restrict the use of the `stbi write png to mem()`, `stbi write jpg core()`, and `stbi write tga core()` functions.

**Name of the Vulnerable Software and Affected Versions** GPAC version 26.07.0 **Description** A heap-based buffer overflow exists in the WebSocket Handler component within the `rmt client handle ws frame()` function of the `src/utils/rmt ws.c` file. This issue can be triggered remotely by manipulating the `payload size` argument. **Recommendations** Update to version abi-16.26.