CVE-2023-45661 (stb_image.h)

stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation information.

address buffer cve file image images information internal issue leak library may memory memory allocation mit points single start trigger