stb heap buffer overflow vulnerability

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufpeek8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...