How many CVEs have a located fix in nothings/stb?

14 published CVEs have a fix traced to functions in nothings/stb, touching 27 functions across 2 files.

Which function in nothings/stb has been patched by the most CVEs?

stb_vorbis_get_samples_float in stb_vorbis.c has been changed by 8 CVE fixes, from 2018 to 2019.

How large is a typical CVE fix in nothings/stb?

The median fix changes 28 lines. 21% of fixes change 20 lines or fewer, and 7% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#412 of 500 repositories

nothings/stb

Name: nothings/stb: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 3, 2023

14

CVE fixes located

Published CVEs

27

Functions patched

Distinct function sites

2

Files patched

Distinct source files

2018–2023

Years covered

By CVE publication date

Overview

14 published CVEs have a fix traced to functions in nothings/stb, the earliest published in 2018. Those fixes changed 27 distinct functions across 2 files, in 182 patch hunks.

Among the 500 repositories tracked here, nothings/stb ranks #412 by the number of CVEs with a located fix.

Most patched functions

Functions in nothings/stb changed by the most CVE fixes.

Most patched files

Files in nothings/stb changed by the most CVE fixes.

1stb_vorbis.c8 CVEs · 8 functions
2stb_image.h6 CVEs · 19 functions

Fix size

How much code a CVE fix in nothings/stb changes, with backports counted once.

28

Median lines changed

Added plus removed, per CVE

21%

Fixes of 20 lines or fewer

Share of CVE fixes

7%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in nothings/stb, and the functions each fix changed.

CVE-2023-43898
CVE-2023-43898stbi__pic_load
Medium · CVSS 5.5
EPSS 0.3%2023-10-03
CVE-2022-28048
CVE-2022-28048stbi__addints_valid stbi__build_huffman stbi__pnm_info
High · CVSS 8.8
EPSS 1.6%2022-04-15
CVE-2022-28041
CVE-2022-28041stbi__addints_valid stbi__build_huffman stbi__pnm_info
Medium · CVSS 6.5
EPSS 2.1%2022-04-15
CVE-2022-28042
CVE-2022-28042stbi__addints_valid stbi__build_huffman stbi__pnm_info
High · CVSS 8.8
EPSS 1.6%2022-04-15
CVE-2021-42716
CVE-2021-42716stbi__pnm_load stbi__hdr_load
High · CVSS 7.1
EPSS 1.5%2021-10-21
CVE-2021-42715
CVE-2021-42715stbi__pnm_load stbi__hdr_load
Medium · CVSS 5.5
EPSS 1.3%2021-10-21
CVE-2019-13220
CVE-2019-13220start_decoder lookup1_values stb_vorbis_get_samples_float
High · CVSS 7.1
EPSS 1.0%2019-08-15
CVE-2019-13218
CVE-2019-13218start_decoder lookup1_values stb_vorbis_get_samples_float
Medium · CVSS 5.5
EPSS 1.0%2019-08-15
CVE-2019-13219
CVE-2019-13219start_decoder lookup1_values stb_vorbis_get_samples_float
Medium · CVSS 5.5
EPSS 1.0%2019-08-15
CVE-2019-13222
CVE-2019-13222start_decoder lookup1_values stb_vorbis_get_samples_float
High · CVSS 7.1
EPSS 1.0%2019-08-15
CVE-2019-13223
CVE-2019-13223start_decoder lookup1_values stb_vorbis_get_samples_float
Medium · CVSS 5.5
EPSS 1.0%2019-08-15
CVE-2019-13221
CVE-2019-13221start_decoder lookup1_values stb_vorbis_get_samples_float
High · CVSS 7.8
EPSS 1.5%2019-08-15

Get an alert for each new nothings/stb CVE, with the patched functions and AI-written analysis.

Monitor stb CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

AcademySoftwareFoundation/OpenImageIO14 CVEs ail-project/ail-framework14 CVEs android.googlesource.com/platform-external-libhevc14 CVEs apostrophecms/apostrophe14 CVEs assimp/assimp14 CVEs authzed/spicedb14 CVEs bigtreecms/BigTree-CMS14 CVEs canonical/lxd14 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in nothings/stb.

How many CVEs have a located fix in nothings/stb?: 14 published CVEs have a fix traced to functions in nothings/stb, touching 27 functions across 2 files.
Which function in nothings/stb has been patched by the most CVEs?: stb_vorbis_get_samples_float in stb_vorbis.c has been changed by 8 CVE fixes, from 2018 to 2019.
How large is a typical CVE fix in nothings/stb?: The median fix changes 28 lines. 21% of fixes change 20 lines or fewer, and 7% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track nothings/stb CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing