4 matches found
CVE-2022-25514
stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...
CVE-2022-25514
stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...
CVE-2022-25514
The CVE-2022-25514 entry concerns stb_truetype.h v1.26, where a heap-buffer-overflow is triggered by ttUSHORT() in stb_truetype.h. The Red Hat, NVD, and related feeds confirm the affected component and the root cause as a heap-buffer-overflow in ttUSHORT(); the attack surface is tied to the stb_t...
