CVE-2025-3408
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Apr 8, 2025
CWE ID 190
CWE ID 189
Summary
CVE-2025-3408 is a critical vulnerability affecting Nothings stb up to f056911. The issue lies in the function stb_dupreplace, which experiences integer overflow, making it susceptible to remote manipulation. No specific version details have been released regarding the affected or updated software, as continuous delivery with rolling releases is employed. Despite early disclosure, the vendor has not responded to the issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.