CVE-2019-19777

Published: Dec 13, 2019Modified: Apr 24, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.

Products: Nothings: Stb Image.h · Saitoha: Libsixel

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Nothings Stb Image.h	Version 2.23
Saitoha Libsixel	Version 1.8.2

Source: cve@mitre.org

ExploitThird Party Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

No history available yet.