CVE-2022-25514

2022-03-1701:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

41.3%

JSON

DISPUTED stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.

OSVersionArchitecturePackageVersionFilename
Debian12alllibstb<= 0.0~git20220908.8b5f1f3+ds-1libstb_0.0~git20220908.8b5f1f3+ds-1_all.deb
Debian11alllibstb<= 0.0~git20200713.b42009b+ds-1libstb_0.0~git20200713.b42009b+ds-1_all.deb
Debian10alllibstb<= 0.0~git20180212.15.e6afb9c-1libstb_0.0~git20180212.15.e6afb9c-1_all.deb
Debian999alllibstb<= 0.0~git20230129.5736b15+ds-1libstb_0.0~git20230129.5736b15+ds-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libstb	<= 0.0~git20220908.8b5f1f3+ds-1	libstb_0.0~git20220908.8b5f1f3+ds-1_all.deb
Debian	11	all	libstb	<= 0.0~git20200713.b42009b+ds-1	libstb_0.0~git20200713.b42009b+ds-1_all.deb
Debian	10	all	libstb	<= 0.0~git20180212.15.e6afb9c-1	libstb_0.0~git20180212.15.e6afb9c-1_all.deb
Debian	999	all	libstb	<= 0.0~git20230129.5736b15+ds-1	libstb_0.0~git20230129.5736b15+ds-1_all.deb

0.001 Low

EPSS

Percentile

41.3%

JSON

Related for DEBIANCVE:CVE-2022-25514