CVE-2026-5185 stb_image堆缓冲区溢出漏洞

#include <stdio.h> #define STB_IMAGE_IMPLEMENTATION #include "stb_image.h" // Proof of Concept for CVE-2026-5185 // This code demonstrates loading a crafted GIF file // that triggers the heap buffer overflow in stbi__gif_load_next. int main(int argc, char **argv) { int w, h, channels; // Load the crafted GIF file // Replace 'malicious.gif' with a file specifically crafted to trigger the overflow unsigned char *img = stbi_load("malicious.gif", &w, &h, &channels, 0); if (img == NULL) { printf("Failed to load image or buffer overflow occurred during load.\n"); return 1; } printf("Image loaded: %dx%d, %d channels\n", w, h, channels); // Free image memory stbi_image_free(img); return 0; }