Repository Issue Activity (beta)

#2002 stb_truetype.h: heap-use-after-free in ttUSHORT via stbtt__GetGlyphShapeTT

#2001 stb_image GIF: missing aggregate bounds check on background+history buffers allows ~2.4GB allocation from 64-byte input

#1930 stb_image: integer overflow in animated GIF multi-frame allocation (layers * stride)

#1998 Support `valueFormat1 == (X_ADVANCE | X_ADVANCE_DEVICE)` case in `stbtt__GetGlyphGPOSInfoAdvance`. Support GPOS table V1.1

#1997 stb_truetype: Support lookupType 9 table in `stbtt__GetGlyphGPOSInfoAdvance`

#1996 stb_image.h: 18-byte TGA header forces ~2.1 GB allocation (per-axis STBI_MAX_DIMENSIONS doesn't bound area)

#1992 GIF: unbounded frame count grows memory with no cap

#1964 [SECURITY] Integer overflow in stb_image_write.h leads to heap buffer overflow in PNG encoding and out-of-bounds reads in JPEG/TGA encoding

#1965 [SECURITY] Stack buffer overflow in stb_include_string via long #include filename

#1963 [SECURITY] stbsp_snprintf with count=0 writes null terminator before buffer

#1962 [SECURITY] Off-curve point at contour end causes OOB read in stbtt__GetGlyphShapeTT

#1961 [SECURITY] Integer overflow in hexwave_init() causes heap/stack buffer overflow in stb_hexwave.h

#1989 feature req: any plans for a tool built for this as an alternitive to image magick

#1865 Two potential problems (or possibly hallucinations) from Gemini

#1852 stb_truetype.h Transform vertices

#1985 `stb_image_resize2` unaligned memory

#1883 Horrible performance for GIF with many frames

#1983 Heap-buffer-overflow in stbtt__find_table() via stbtt_InitFont() (stb_truetype)

#1981 missing NULL check in vorbis_deinit

#1861 Out-of-bounds read in PNG palette expansion

#1875 JPEG->Float32 loader

#1876 [stb_image] Memory exhaustion DoS via crafted GIF (10 bytes → 1GB allocation)

#1880 Resource Exhaustion DoS via Malformed TGA Image

#1885 Fix to enabling SDL 2 mouse events in stb_tilemap_editor.h

#1886 stb_tilemap_editor.h show in the editor incorrect tile in the palette preview