CVE-2023-45666

Summary

CVE-2023-45666 is a vulnerability affecting the stb_image library, which is used for processing images. The issue lies in the function `stbi__load_gif_main`, where the output parameter `*delays` may not be properly reset to zero upon failure, leading to potential memory leaks. If the function recognizes the image as GIF but fails to load it, memory allocated for `*delays` may not be freed. Additionally, if `stbi__convert_format` is called and fails, both the memory in `*delays` and potentially other allocated memory may be double-freed. Callers must be cautious when handling `delays` to prevent memory leaks or double-free errors.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.