stb heap buffer overflow vulnerability (CNVD-2020-04059)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufget8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

CVE-2020-6617

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

CVE-2020-6619

stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...

CVE-2020-6619

stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...

CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

UBUNTU-CVE-2020-6620

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...

UBUNTU-CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

UBUNTU-CVE-2020-6623

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...

UBUNTU-CVE-2020-6621

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...

CVE-2020-6617

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

CVE-2020-6617

CVE-2020-6617 affects the stb_truetype.h component of the stb library, with versions through 1.22. The root cause described in multiple sources is an assertion failure inside stbtt__cff_int, which can lead to a crash (DoS). Public details on affected products, versions beyond 1.22, or concrete re...

CVE-2020-6618

The CVE-2020-6618 entry concerns the stb_truetype.h/STB library: versions through 1.22 contain a heap-based buffer over-read in stbtt__find_table. Multiple sources (NVD entry and various advisories) confirm the underlying issue but do not provide an explicit patched version in these documents. Im...

CVE-2020-6619

CVE-2020-6619 affects the stb_truetype.h library (stb 1.22 and earlier); the flaw is an assertion failure in stbtt__buf_seek. Public references report this across multiple advisories (NVD, Red Hat, Ubuntu, Debian, CNVD, osv) with vulnerability entries focusing on the assertion in stb_truetype.h. ...

CVE-2020-6620

CVE-2020-6620 affects stb_truetype.h up to version 1.22, where a heap-based buffer over-read occurs in stbtt__buf_get8. The issue is scoped to the stb library and is reported across multiple sources (e.g., NVD and Debian/Ubuntu trackers) with the concrete description: a heap overflow/over-read in...

CVE-2020-6621

CVE-2020-6621 concerns the stb_truetype.h library (up to 1.22) containing a heap-based buffer over-read in the ttUSHORT function. The primary description across sources identifies this as a heap-based over-read/overflow condition in stb_truetype.h, version 1.22 and earlier. The NVD entry lists a ...

CVE-2020-6622

CVE-2020-6622 affects the stb_truetype.h library (stb_truetype.h up to version 1.22). The vulnerability is a heap-based buffer over-read in the function stbtt__buf_peek8. The available connected documents confirm the affected component and the underlying issue, but do not provide a vendor patch/v...

CVE-2020-6623

The CVE-2020-6623 entry concerns the stb_truetype.h library: all versions up to 1.22 have an assertion failure in stbtt__cff_get_index. Connected sources confirm the affected component and the underlying cause, but no public mitigation steps are provided within the supplied documents. The NVD dat...

UBUNTU-CVE-2019-20056

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has an assertion failure in stbishiftsigned...

DEBIAN-CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

UBUNTU-CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...