stb heap buffer overflow vulnerability (CNVD-2020-04059)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufget8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...