CVE-2023-45664

Summary

CVE-2023-45664 is a vulnerability affecting the stb_image library, which is used for processing images. A maliciously crafted image file can cause the library to attempt to double-free memory in the function `stbi__load_gif_main_outofmem`. This occurs when the `layers * stride` value is zero, leading to implementation-defined behavior. In some cases, this may result in the library freeing old memory before allocating new memory, creating an opportunity for potential code execution in a multi-threaded environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.