Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2025-15155: Stack-based Buffer Overflow in floooh sokol

0
Medium
VulnerabilityCVE-2025-15155cvecve-2025-15155
Published: Sun Dec 28 2025 (12/28/2025, 21:32:10 UTC)
Source: CVE Database V5
Vendor/Project: floooh
Product: sokol

Description

A vulnerability was detected in floooh sokol up to 16cbcc864012898793cd2bc57f802499a264ea40. The impacted element is the function _sg_pipeline_desc_defaults in the library sokol_gfx.h. The manipulation results in stack-based buffer overflow. The attack requires a local approach. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is identified as 5d11344150973f15e16d3ec4ee7550a73fb995e0. It is advisable to implement a patch to correct this issue.

Technical Details

Data Version
5.2
Assigner Short Name
VulDB
Date Reserved
2025-12-27T16:51:38.125Z
Cvss Version
4.0
State
PUBLISHED

Threat ID: 6951a5cbfd294cd93b2410da

Added to database: 12/28/2025, 9:48:59 PM

Last updated: 12/29/2025, 12:11:24 AM

Views: 12

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats