CVE-2025-3406

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911

Description: A vulnerability was found in the function stbhw build tileset from image of the component Header Array Handler. The manipulation of the argument w leads to an out-of-bounds read. It is possible to launch the attack remotely.

Recommendations: As a temporary workaround, consider restricting the use of the stbhw build tileset from image function until a fix is available. Avoid manipulating the argument w in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.