CVE-2020-6617

CVE-2020-6617 affects the stb_truetype.h component of the stb library, with versions through 1.22. The root cause described in multiple sources is an assertion failure inside stbtt__cff_int, which can lead to a crash (DoS). Public details on affected products, versions beyond 1.22, or concrete re...

CVE-2020-6617

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

CVE-2020-6617

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

CVE-2020-6617

Removed by vendor...

CVE-2020-6619

Removed by vendor...

CVE-2020-6619

stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...

CVE-2020-6619

CVE-2020-6619 affects the stb_truetype.h library (stb 1.22 and earlier); the flaw is an assertion failure in stbtt__buf_seek. Public references report this across multiple advisories (NVD, Red Hat, Ubuntu, Debian, CNVD, osv) with vulnerability entries focusing on the assertion in stb_truetype.h. ...

CVE-2020-6619

stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...

CVE-2020-6623

The CVE-2020-6623 entry concerns the stb_truetype.h library: all versions up to 1.22 have an assertion failure in stbtt__cff_get_index. Connected sources confirm the affected component and the underlying cause, but no public mitigation steps are provided within the supplied documents. The NVD dat...

CVE-2020-6623

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...

CVE-2020-6623

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...

CVE-2020-6623

Removed by vendor...

CVE-2019-6468

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet ECS features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIN...

CVE-2020-6623: Reachable Assertion

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...

PT-2020-19184

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier Description The issue is related to an assertion failure in the stbtt cff int function. Recommendations For versions 1.22 and earlier, update to a version that fixes the assertion failure in the stbtt cff int...

PT-2020-19190

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to an assertion failure in the stbtt cff get index function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

CVE-2020-6619: Reachable Assertion

stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...

MikroTik's RouterOS Console Process Assertion Failure Vulnerability

RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A remote attacker who allows authentication could crash the console process by sending carefully crafted packets...

CVE-2020-6617: Reachable Assertion

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

PT-2020-19186

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to an assertion failure in the stbtt buf seek function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...