Nothing's STB Out-of-Bounds Read Vulnerability in Header Array Handler

An out-of-bounds read vulnerability has been identified in Nothing's STB, prior to commit f056911. The issue arises in the function 'stbhw_build_tileset_from_image' within the Header Array Handler component. This vulnerability can be exploited remotely by manipulating the 'w' argument.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be used to read memory locations outside the intended buffer, possibly causing information disclosure or allowing further exploitation.