CVE-2025-3409 — Nothings stb stb_include_string stack-based overflow

CVE-2025-3409

Nothings stb stb_include_string stack-based overflow PUBLISHED

Description (CNA)

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argument path_to_includes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Nothings / stb	affected f056911

CWE

CWE-121, CWE-119

References

https://vuldb.com/?id.303687
https://vuldb.com/?ctiid.303687
https://vuldb.com/?submit.544231

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.