Vulnerability Details CVE-2025-3409
                A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argument path_to_includes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.0
                        
                    
                    
                        
                            EPSS Ranking 9.9%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 6.3
                        
                    
                    
                        
                            CVSS v2 Score 7.5
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2025-3409
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.50
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.51
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.52
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.53
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.54
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.55
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.56
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.57
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.58
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.59
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.60
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.61
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.90
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.91
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.92
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.93
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.94
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.95
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.96
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.97
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.98
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:0.99
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.00
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.01
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.02
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.03
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.04
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.05
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.06
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.07
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.08
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.09
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.10
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.11
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.12
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.13
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.14
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.15
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.16
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.17
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.18
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.19
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.20
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.21
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.22
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.23
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.24
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.25
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.26
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.27
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.28
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.29
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.30
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.31
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.32
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.33
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.34
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.35
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.36
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.37
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.38
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.39
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.40
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.41
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.42
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.43
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.44
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.45
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.46
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.47
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:1.48
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.00
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.01
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.02
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.03
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.04
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.05
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.06
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.07
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.08
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.09
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.10
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.11
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.12
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.13
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.14
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.15
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.16
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.17
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.18
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.19
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.20
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.21
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.22
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.23
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.24
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.25
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.26
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.27
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:nothings:stb_image.h:2.28