CVE-2026-5186 stb_image.h双重释放漏洞

#include "stb_image.h" #include <stdio.h> int main() { // Simulate loading a crafted GIF file that triggers the double free in stbi__load_gif_main int width, height, channels; // Replace "malicious.gif" with a file specifically crafted to trigger the vulnerability // The vulnerability occurs during the parsing of multi-frame GIF data unsigned char *data = stbi_load("malicious.gif", &width, &height, &channels, 0); if (data == NULL) { // If the vulnerability is triggered, a crash or heap corruption may occur here printf("Failed to load image or vulnerability triggered.\n"); } else { stbi_image_free(data); } return 0; }