Threats tagged 'ghsa-x842-766r-cjq8'

CVE-2026-102804 is an integer overflow vulnerability in the hexwave_init function of the stb_hexwave.h library within Nothings stb. The flaw occurs due to improper handling of the width or oversample arguments, which can lead to integer overflow. Remote exploitation is possible, and public exploit code is available. The vulnerability has a medium severity with a CVSS score of 6.5. The project has been notified but has not yet issued a patch or response.