CVE catalog

CVE-2018-16981

MAME vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.59% · Oct 25, 2026

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibstbsid0.0~git20250907.fede005+ds-1fixed
Debianlibstbforky0.0~git20250907.fede005+ds-1fixed
Debianlibstbtrixie0.0~git20241109.5c20573+ds-1fixed
Debianlibstbbookworm0.0~git20220908.8b5f1f3+ds-1fixed
Ubuntumamenoble0.264+dfsg.1-1ubuntu0.1~esm1fixed
Ubuntumame-datanoble0.264+dfsg.1-1ubuntu0.1~esm1fixed
Ubuntumame-docnoble0.264+dfsg.1-1ubuntu0.1~esm1fixed
Ubuntumame-toolsnoble0.264+dfsg.1-1ubuntu0.1~esm1fixed
Ubuntumamepro0.257+dfsg.1-1vulnerable
Ubuntumamepro0.258+dfsg.1-1build1vulnerable
Ubuntumamepro0.261+dfsg.1-1vulnerable
Ubuntumamepro0.261+dfsg.1-1build2vulnerable
Ubuntumamepro0.261+dfsg.1-1build3vulnerable
Ubuntumamepro0.264+dfsg.1-1vulnerable
Ubuntumamepro0.264+dfsg.1-1ubuntu0.1~esm1fixed
Ubuntumame25.100.275+dfsg.1-3vulnerable
Ubuntumame25.100.277+dfsg.1-4vulnerable
Ubuntumame25.100.277+dfsg.1-4ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibstbsourcesid0.0~git20190617.5.c72a95d-1not yet assignedNot reportedNot reported
Debianlibstbsourceforky0.0~git20190617.5.c72a95d-1not yet assignedNot reportedNot reported
Debianlibstbsourcetrixie0.0~git20190617.5.c72a95d-1not yet assignedNot reportedNot reported
Debianlibstbsourcebookworm0.0~git20190617.5.c72a95d-1not yet assignedNot reportedNot reported
Ubuntumamedebnoble0.264+dfsg.1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntumame-datadebnoble0.264+dfsg.1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntumame-docdebnoble0.264+dfsg.1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntumame-toolsdebnoble0.264+dfsg.1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntumamedebpro0.264+dfsg.1-1ubuntu0.1~esm1Not reportedUSN-7913-1Not reported
Ubuntumamedeb25.100.277+dfsg.1-4ubuntu0.1Not reportedUSN-7913-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libstb0]Fixed

    Source package: [libstb]

    Details (2)

    • 0.0~git20220908.8b5f1f3+ds-1 · amd64 · bookworm

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · bookworm; usn · libstb · debian · 12

    • 0.0~git20220908.8b5f1f3+ds-1 · arm64 · bookworm

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · bookworm; usn · libstb · debian · 12

  • [libstb-dev]Fixed

    Source package: [libstb]

    Details (2)

    • 0.0~git20220908.8b5f1f3+ds-1 · amd64 · bookworm

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · bookworm; usn · libstb · debian · 12

    • 0.0~git20220908.8b5f1f3+ds-1 · arm64 · bookworm

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · bookworm; usn · libstb · debian · 12

[Debian 13 (Trixie)]

  • [libstb0t64]Fixed

    Source package: [libstb]

    Details (2)

    • 0.0~git20241109.5c20573+ds-1 · amd64 · trixie

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · 13

    • 0.0~git20241109.5c20573+ds-1 · arm64 · trixie

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · 13

  • [libstb-dev]Fixed

    Source package: [libstb]

    Details (2)

    • 0.0~git20241109.5c20573+ds-1 · amd64 · trixie

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · 13

    • 0.0~git20241109.5c20573+ds-1 · arm64 · trixie

      Fixed · Fixed: 0.0~git20190617.5.c72a95d-1

      usn · libstb · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]