Nothing STB Out-of-Bounds Read Vulnerability in stbhw_build_tileset_from_image Function

A critical out-of-bounds read vulnerability has been identified in Nothing's STB product, in versions prior to f056911. The issue arises in the function stbhw_build_tileset_from_image, where improper handling of the h_count and v_count arguments allows for out-of-bounds memory access. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be used to disclose sensitive information or cause a denial-of-service condition.