Lucene search
K

8 matches found

Snyk
Snyk
added 2022/03/17 1:36 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the function stbttfindtable at stbtruetype.h. Remediation There is no fixed version for stb. References - GitHub Issue...

7.3CVSS7.1AI score0.0026EPSS
Exploits1References2
OSV
OSV
added 2022/03/17 1:15 a.m.1 views

CVE-2022-25516

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbttfindtable at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS6.6AI score0.0026EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/17 1:15 a.m.3 views

CVE-2022-25516

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbttfindtable at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS5.5AI score0.0026EPSS
Exploits1References3
OSV
OSV
added 2022/03/17 1:15 a.m.0 views

UBUNTU-CVE-2022-25516

DISPUTED stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbttfindtable at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS5.8AI score0.0026EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/03/17 12:0 a.m.2 views

PT-2022-17345 · Unknown · Stb Truetype.H

Name of the Vulnerable Software and Affected Versions: stb truetype.h version 1.26 Description: A heap-buffer-overflow issue was discovered in the stbtt find table function at stb truetype.h. It is noted that the source code includes a disclaimer stating it should only be used with trusted input....

6.5CVSS7.4AI score0.0026EPSS
Exploits1References7
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.2 views

stb_truetype.h 缓冲区错误漏洞

stbtruetype.h is a TTF font parsing library. A buffer error vulnerability exists in stbtruetype.h v1.26, which stems from the function stbttfindtable in stbtruetype.h containing a heap buffer overflow...

6.5CVSS6.9AI score0.0026EPSS
Exploits1References3
CNVD
CNVD
added 2020/01/09 12:0 a.m.1 views

stb heap buffer overflow vulnerability (CNVD-2020-04061)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttfindtable in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

8.8CVSS7.3AI score0.00452EPSS
Exploits1References1
OSV
OSV
added 2020/01/08 11:15 p.m.0 views

UBUNTU-CVE-2020-6618

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

8.8CVSS6AI score0.00452EPSS
Exploits1References3
Rows per page
Query Builder