fix: the stb_image in stb_image.h

[orbisai0security]

Summary

Fix critical severity security issue in thermion_dart/native/include/filament/third_party/stb/stb_image.h.

Vulnerability

Field	Value
ID	V-001
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-001
File	thermion_dart/native/include/filament/third_party/stb/stb_image.h:1511

Description: The stb_image.h image parsing code performs memcpy operations at lines 1511 and 1521 copying data from s->img_buffer into a fixed-size buffer using attacker-controlled lengths (blen and n) derived directly from image file headers. There is no verification that blen or n is within the bounds of the destination buffer. A crafted image with an oversized chunk header can overflow the heap buffer, overwriting adjacent heap metadata or function pointers.

Changes

• thermion_dart/native/include/filament/third_party/stb/stb_image.h

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security