Vulnerability-Lookup

OPENSUSE-SU-2026:20717-1

Vulnerability from csaf_opensuse - Published: 2026-05-12 10:20 - Updated: 2026-09-17 17:32

Summary

Security update for raylib

Severity

Important

Notes

Title of the patch: Security update for raylib

Description of the patch: This update for raylib fixes the following issues: Changes in raylib: - security update: * CVE-2025-15533: Fix heap-based buffer overflow via GenImageFontAtlas function manipulation (bsc#1256900) * CVE-2025-15534: Fix integer overflow vulnerability in LoadFontData (bsc#1256901) - Update to 5.5: * NEW raylib pre-configured Windows package: The new raylib portable and self-contained Windows package for raylib 5.5, intended for nobel devs that start in programming world, comes with one big addition: support for C code building for Web platform with one-single-mouse-click! For the last 10 years, the pre-configured raylib Windows package allowed to edit simple C projects on Notepad++ and easely compile Windows executables with an automatic script; this new release adds the possibility to compile the same C projects for Web platform with a simple mouse click. This new addition greatly simplifies C to WebAssembly project building for new users. The raylib Windows Installer package can be downloaded for free from raylib on itch.io. * NEW raylib project creator tool: A brand new tool developed to help raylib users to setup new projects in a professional way. raylib project creator generates a complete project structure with multiple build systems ready-to-use and GitHub CI/CD actions pre-configured. It only requires providing some C files and basic project parameters! The tools is free and open-source, and it can be used online!. * NEW Platform backend supported: RGFW: Thanks to the rcore platform-split implemented in raylib 5.0, adding new platforms backends has been greatly simplified, new backends can be added using provided template, self-contained in a single C module, completely portable. A new platform backend has been added: RGFW. RGFW is a new single-file header-only portable library (RGFW.h) intended for platform-functionality management (windowing and inputs); in this case for desktop platforms (Windows, Linux, macOS) but also for Web platform. It adds a new alternative to the already existing GLFW and SDL platform backends. * NEW Platform backend version supported: SDL3: Previous raylib 5.0 added support for SDL2 library, and raylib 5.5 not only improves SDL2 functionality, with several issues reviewed, but also adds support for the recently released big SDL update in years: SDL3. Now users can select at compile time the desired SDL version to use, increasing the number of potential platforms supported in the future! * NEW Retro-console platforms supported: Dreamcast, N64, PSP, PSVita, PS4: Thanks to the platform-split on raylib 5.0, supporting new platform backends is easier than ever! Along the raylib rlgl module support for the OpenGL 1.1 graphics API, it opened the door to multiple homebrew retro-consoles backend implementations! It's amazing to see raylib running on +20 year old consoles like Dreamcast, PSP or PSVita, considering the hardware constraints of those platforms and proves raylib outstanding versability! Those additional platforms can be found in separate repositories and have been created by the amazing programmer Antonio Jose Ramos Marquez (@psxdev). * NEW GPU Skinning support: After lots of requests for this feature, it has been finally added to raylib thanks to the contributor Daniel Holden (@orangeduck), probably the developer that has further pushed models animations with raylib, developing two amazing tools to visualize and test animations: GenoView and BVHView. Adding GPU skinning was a tricky feature, considering it had to be available for all raylib supported platforms, including limited ones like Raspberry Pi with OpenGL ES 2.0, where some advance OpenGL features are not available (UBO, SSBO, Transform Feedback) but a multi-platform solution was found to make it possible. A new example, models_gpu_skinning has been added to illustrate this new functionality. As an extra, previous existing CPU animation system has been greatly improved, multiplying performance by a factor (simplifiying required maths). * NEW raymath C++ operators: After several requested for this feature, C++ math operators for Vector2, Vector3, Vector4, Quaternion and Matrix has been added to raymath as an extension to current implementation. Despite being only available for C++ because C does not support it, these operators simplify C++ code when doing math operations. * Normals support on batching system * Clipboard images reading support * CRC32/MD5/SHA1 hash computation * Gamepad vibration support * Improved font loading (no GPU required) with BDF fonts support * Time-based camera movement * Improved GLTF animations loading

Patchnames: openSUSE-Leap-16.0-packagehub-242

CVE-2025-15533

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2025-15534

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 8 products, the same list as for CVE-2025-15533

Threats

Impact important

References

10 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://bugzilla.suse.com/1256900	self
https://bugzilla.suse.com/1256901	self
https://www.suse.com/security/cve/CVE-2025-15533/	self
https://www.suse.com/security/cve/CVE-2025-15534/	self
https://www.suse.com/security/cve/CVE-2025-15533	external
https://bugzilla.suse.com/1256900	external
https://www.suse.com/security/cve/CVE-2025-15534	external
https://bugzilla.suse.com/1256901	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for raylib",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for raylib fixes the following issues:\n\nChanges in raylib:\n\n- security update:\n  * CVE-2025-15533: Fix heap-based buffer overflow via GenImageFontAtlas function manipulation (bsc#1256900)\n  * CVE-2025-15534: Fix integer overflow vulnerability in LoadFontData (bsc#1256901)\n\n- Update to 5.5:\n  * NEW raylib pre-configured Windows package: The new raylib portable and\n    self-contained Windows package for raylib 5.5, intended for nobel devs that\n    start in programming world, comes with one big addition: support for C code\n    building for Web platform with one-single-mouse-click! For the last 10\n    years, the pre-configured raylib Windows package allowed to edit simple C\n    projects on Notepad++ and easely compile Windows executables with an\n    automatic script; this new release adds the possibility to compile the same\n    C projects for Web platform with a simple mouse click. This new addition\n    greatly simplifies C to WebAssembly project building for new users. The\n    raylib Windows Installer package can be downloaded for free from raylib on\n    itch.io.\n  * NEW raylib project creator tool: A brand new tool developed to help raylib\n    users to setup new projects in a professional way. raylib project creator\n    generates a complete project structure with multiple build systems\n    ready-to-use and GitHub CI/CD actions pre-configured. It only requires\n    providing some C files and basic project parameters! The tools is free and\n    open-source, and it can be used online!.\n  * NEW Platform backend supported: RGFW: Thanks to the rcore platform-split\n    implemented in raylib 5.0, adding new platforms backends has been greatly\n    simplified, new backends can be added using provided template,\n    self-contained in a single C module, completely portable. A new platform\n    backend has been added: RGFW. RGFW is a new single-file header-only\n    portable library (RGFW.h) intended for platform-functionality management\n    (windowing and inputs); in this case for desktop platforms (Windows, Linux,\n    macOS) but also for Web platform. It adds a new alternative to the already\n    existing GLFW and SDL platform backends.\n  * NEW Platform backend version supported: SDL3: Previous raylib 5.0 added\n    support for SDL2 library, and raylib 5.5 not only improves SDL2\n    functionality, with several issues reviewed, but also adds support for the\n    recently released big SDL update in years: SDL3. Now users can select at\n    compile time the desired SDL version to use, increasing the number of\n    potential platforms supported in the future!\n  * NEW Retro-console platforms supported: Dreamcast, N64, PSP, PSVita, PS4:\n    Thanks to the platform-split on raylib 5.0, supporting new platform\n    backends is easier than ever! Along the raylib rlgl module support for the\n    OpenGL 1.1 graphics API, it opened the door to multiple homebrew\n    retro-consoles backend implementations! It\u0027s amazing to see raylib running\n    on +20 year old consoles like Dreamcast, PSP or PSVita, considering the\n    hardware constraints of those platforms and proves raylib outstanding\n    versability! Those additional platforms can be found in separate\n    repositories and have been created by the amazing programmer Antonio Jose\n    Ramos Marquez (@psxdev).\n  * NEW GPU Skinning support: After lots of requests for this feature, it has\n    been finally added to raylib thanks to the contributor Daniel Holden\n    (@orangeduck), probably the developer that has further pushed models\n    animations with raylib, developing two amazing tools to visualize and test\n    animations: GenoView and BVHView. Adding GPU skinning was a tricky feature,\n    considering it had to be available for all raylib supported platforms,\n    including limited ones like Raspberry Pi with OpenGL ES 2.0, where some\n    advance OpenGL features are not available (UBO, SSBO, Transform Feedback)\n    but a multi-platform solution was found to make it possible. A new example,\n    models_gpu_skinning has been added to illustrate this new functionality. As\n    an extra, previous existing CPU animation system has been greatly improved,\n    multiplying performance by a factor (simplifiying required maths).\n  * NEW raymath C++ operators: After several requested for this feature, C++\n    math operators for Vector2, Vector3, Vector4, Quaternion and Matrix has\n    been added to raymath as an extension to current implementation. Despite\n    being only available for C++ because C does not support it, these operators\n    simplify C++ code when doing math operations.\n  * Normals support on batching system\n  * Clipboard images reading support\n  * CRC32/MD5/SHA1 hash computation\n  * Gamepad vibration support\n  * Improved font loading (no GPU required) with BDF fonts support\n  * Time-based camera movement\n  * Improved GLTF animations loading\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-242",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20717-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256900",
        "url": "https://bugzilla.suse.com/1256900"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256901",
        "url": "https://bugzilla.suse.com/1256901"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-15533 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-15533/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-15534 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-15534/"
      }
    ],
    "title": "Security update for raylib",
    "tracking": {
      "current_release_date": "2026-09-17T17:32:17Z",
      "generator": {
        "date": "2026-05-12T10:20:41Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20717-1",
      "initial_release_date": "2026-05-12T10:20:41Z",
      "revision_history": [
        {
          "date": "2026-05-12T10:20:41Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:34:45Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:37:41Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:32:17Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libraylib550-0:5.5-bp160.1.1.aarch64",
                "product": {
                  "name": "libraylib550-0:5.5-bp160.1.1.aarch64",
                  "product_id": "libraylib550-0:5.5-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libraylib550@5.5-bp160.1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "raylib-devel-0:5.5-bp160.1.1.aarch64",
                "product": {
                  "name": "raylib-devel-0:5.5-bp160.1.1.aarch64",
                  "product_id": "raylib-devel-0:5.5-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/raylib-devel@5.5-bp160.1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libraylib550-0:5.5-bp160.1.1.ppc64le",
                "product": {
                  "name": "libraylib550-0:5.5-bp160.1.1.ppc64le",
                  "product_id": "libraylib550-0:5.5-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libraylib550@5.5-bp160.1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "raylib-devel-0:5.5-bp160.1.1.ppc64le",
                "product": {
                  "name": "raylib-devel-0:5.5-bp160.1.1.ppc64le",
                  "product_id": "raylib-devel-0:5.5-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/raylib-devel@5.5-bp160.1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libraylib550-0:5.5-bp160.1.1.s390x",
                "product": {
                  "name": "libraylib550-0:5.5-bp160.1.1.s390x",
                  "product_id": "libraylib550-0:5.5-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libraylib550@5.5-bp160.1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "raylib-devel-0:5.5-bp160.1.1.s390x",
                "product": {
                  "name": "raylib-devel-0:5.5-bp160.1.1.s390x",
                  "product_id": "raylib-devel-0:5.5-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/raylib-devel@5.5-bp160.1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libraylib550-0:5.5-bp160.1.1.x86_64",
                "product": {
                  "name": "libraylib550-0:5.5-bp160.1.1.x86_64",
                  "product_id": "libraylib550-0:5.5-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libraylib550@5.5-bp160.1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "raylib-devel-0:5.5-bp160.1.1.x86_64",
                "product": {
                  "name": "raylib-devel-0:5.5-bp160.1.1.x86_64",
                  "product_id": "raylib-devel-0:5.5-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/raylib-devel@5.5-bp160.1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libraylib550-0:5.5-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64"
        },
        "product_reference": "libraylib550-0:5.5-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libraylib550-0:5.5-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le"
        },
        "product_reference": "libraylib550-0:5.5-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libraylib550-0:5.5-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x"
        },
        "product_reference": "libraylib550-0:5.5-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libraylib550-0:5.5-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64"
        },
        "product_reference": "libraylib550-0:5.5-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "raylib-devel-0:5.5-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64"
        },
        "product_reference": "raylib-devel-0:5.5-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "raylib-devel-0:5.5-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le"
        },
        "product_reference": "raylib-devel-0:5.5-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "raylib-devel-0:5.5-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x"
        },
        "product_reference": "raylib-devel-0:5.5-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "raylib-devel-0:5.5-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
        },
        "product_reference": "raylib-devel-0:5.5-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-15533",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-15533"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called 5a3391fdce046bc5473e52afbd835dd2dc127146. Applying a patch is advised to resolve this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x",
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-15533",
          "url": "https://www.suse.com/security/cve/CVE-2025-15533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256900 for CVE-2025-15533",
          "url": "https://bugzilla.suse.com/1256900"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-12T10:20:41Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-15533"
    },
    {
      "cve": "CVE-2025-15534",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-15534"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The identifier of the patch is 5a3391fdce046bc5473e52afbd835dd2dc127146. It is suggested to install a patch to address this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x",
          "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x",
          "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-15534",
          "url": "https://www.suse.com/security/cve/CVE-2025-15534"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256901 for CVE-2025-15534",
          "url": "https://bugzilla.suse.com/1256901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:libraylib550-0:5.5-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.s390x",
            "openSUSE Leap 16.0:raylib-devel-0:5.5-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-12T10:20:41Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-15534"
    }
  ]
}

CVE-2025-15533 (GCVE-0-2025-15533)

Vulnerability from cvelistv5 – Published: 2026-01-18 05:02 – Updated: 2026-02-23 08:36 X_Open Source

Title

raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow

Summary

A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called 5a3391fdce046bc5473e52afbd835dd2dc127146. Applying a patch is advised to resolve this issue.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-21 18:50 UTC

CWE

CWE-122 - Heap-based Buffer Overflow
CWE-119 - Memory Corruption

Assigner

VulDB mitre root

References

9 references

URL	Tags
https://vuldb.com/?id.341705	vdb-entrytechnical-description
https://vuldb.com/?ctiid.341705	signaturepermissions-required
https://vuldb.com/?submit.733341	third-party-advisory
https://vuldb.com/?submit.733342	third-party-advisory
https://github.com/raysan5/raylib/issues/5433	issue-tracking
https://github.com/raysan5/raylib/pull/5450	issue-tracking
https://github.com/oneafter/1224/blob/main/hbf2	exploit
https://github.com/raysan5/raylib/commit/5a3391fd…	patch
https://github.com/raysan5/raylib/	product

Impacted products

1 product

Vendor	Product	Version
raysan5	raylib	Affected: 909f040

Credits

Oneafter (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15533",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-21T18:50:27.872620Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-21T18:53:31.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "raylib",
          "vendor": "raysan5",
          "versions": [
            {
              "status": "affected",
              "version": "909f040"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Oneafter (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called 5a3391fdce046bc5473e52afbd835dd2dc127146. Applying a patch is advised to resolve this issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-23T08:36:44.598Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-341705 | raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.341705"
        },
        {
          "name": "VDB-341705 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.341705"
        },
        {
          "name": "Submit #733341 | raysan5 raylib 909f040 Heap-based Buffer Overflow",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.733341"
        },
        {
          "name": "Submit #733342 | raysan5 raylib 909f040 Heap-based Buffer Overflow (Duplicate)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.733342"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/raysan5/raylib/issues/5433"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/raysan5/raylib/pull/5450"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/oneafter/1224/blob/main/hbf2"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/raysan5/raylib/commit/5a3391fdce046bc5473e52afbd835dd2dc127146"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/raysan5/raylib/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-17T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-01-17T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-02-17T20:09:32.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2025-15533",
    "datePublished": "2026-01-18T05:02:08.672Z",
    "dateReserved": "2026-01-17T16:11:40.667Z",
    "dateUpdated": "2026-02-23T08:36:44.598Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15534 (GCVE-0-2025-15534)

Vulnerability from cvelistv5 – Published: 2026-01-18 06:32 – Updated: 2026-02-23 08:36 X_Open Source

Title

raysan5 raylib rtext.c LoadFontData integer overflow

Summary

A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The identifier of the patch is 5a3391fdce046bc5473e52afbd835dd2dc127146. It is suggested to install a patch to address this issue.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-21 18:47 UTC

CWE

CWE-190 - Integer Overflow
CWE-189 - Numeric Error

Assigner

VulDB mitre root

References

8 references

URL	Tags
https://vuldb.com/?id.341706	vdb-entrytechnical-description
https://vuldb.com/?ctiid.341706	signaturepermissions-required
https://vuldb.com/?submit.733343	third-party-advisory
https://github.com/raysan5/raylib/issues/5436	issue-tracking
https://github.com/raysan5/raylib/pull/5450	issue-tracking
https://github.com/oneafter/1224/blob/main/segv1	exploit
https://github.com/raysan5/raylib/commit/5a3391fd…	patch
https://github.com/raysan5/raylib/	product

Impacted products

1 product

Vendor	Product	Version
raysan5	raylib	Affected: 909f040

Credits

Oneafter (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-21T18:47:55.625985Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-21T18:53:17.884Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "raylib",
          "vendor": "raysan5",
          "versions": [
            {
              "status": "affected",
              "version": "909f040"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Oneafter (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The identifier of the patch is 5a3391fdce046bc5473e52afbd835dd2dc127146. It is suggested to install a patch to address this issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "Integer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-189",
              "description": "Numeric Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-23T08:36:56.942Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-341706 | raysan5 raylib rtext.c LoadFontData integer overflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.341706"
        },
        {
          "name": "VDB-341706 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.341706"
        },
        {
          "name": "Submit #733343 | raysan5 raylib 909f040 Integer Overflow",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.733343"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/raysan5/raylib/issues/5436"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/raysan5/raylib/pull/5450"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/oneafter/1224/blob/main/segv1"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/raysan5/raylib/commit/5a3391fdce046bc5473e52afbd835dd2dc127146"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/raysan5/raylib/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-17T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-01-17T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-02-17T19:20:34.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "raysan5 raylib rtext.c LoadFontData integer overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2025-15534",
    "datePublished": "2026-01-18T06:32:06.449Z",
    "dateReserved": "2026-01-17T16:11:45.728Z",
    "dateUpdated": "2026-02-23T08:36:56.942Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:20717-1

CVE-2025-15533 (GCVE-0-2025-15533)

CVE-2025-15534 (GCVE-0-2025-15534)

Tags

Sightings

Nomenclature

Related by attack behaviour