CVE-2020-6618

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

CVE-2020-6617

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...

CVE-2020-6617

CVE-2020-6617 affects the stb_truetype.h component of the stb library, with versions through 1.22. The root cause described in multiple sources is an assertion failure inside stbtt__cff_int, which can lead to a crash (DoS). Public details on affected products, versions beyond 1.22, or concrete re...

CVE-2020-6618

The CVE-2020-6618 entry concerns the stb_truetype.h/STB library: versions through 1.22 contain a heap-based buffer over-read in stbtt__find_table. Multiple sources (NVD entry and various advisories) confirm the underlying issue but do not provide an explicit patched version in these documents. Im...

CVE-2020-6619

CVE-2020-6619 affects the stb_truetype.h library (stb 1.22 and earlier); the flaw is an assertion failure in stbtt__buf_seek. Public references report this across multiple advisories (NVD, Red Hat, Ubuntu, Debian, CNVD, osv) with vulnerability entries focusing on the assertion in stb_truetype.h. ...

CVE-2020-6620

CVE-2020-6620 affects stb_truetype.h up to version 1.22, where a heap-based buffer over-read occurs in stbtt__buf_get8. The issue is scoped to the stb library and is reported across multiple sources (e.g., NVD and Debian/Ubuntu trackers) with the concrete description: a heap overflow/over-read in...

CVE-2020-6621

CVE-2020-6621 concerns the stb_truetype.h library (up to 1.22) containing a heap-based buffer over-read in the ttUSHORT function. The primary description across sources identifies this as a heap-based over-read/overflow condition in stb_truetype.h, version 1.22 and earlier. The NVD entry lists a ...

CVE-2020-6622

CVE-2020-6622 affects the stb_truetype.h library (stb_truetype.h up to version 1.22). The vulnerability is a heap-based buffer over-read in the function stbtt__buf_peek8. The available connected documents confirm the affected component and the underlying issue, but do not provide a vendor patch/v...

CVE-2020-6623

The CVE-2020-6623 entry concerns the stb_truetype.h library: all versions up to 1.22 have an assertion failure in stbtt__cff_get_index. Connected sources confirm the affected component and the underlying cause, but no public mitigation steps are provided within the supplied documents. The NVD dat...

UBUNTU-CVE-2019-20056

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has an assertion failure in stbishiftsigned...

DEBIAN-CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

UBUNTU-CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

stb_image.h Buffer Overflow Vulnerability

stbimage.h is an image library. A buffer overflow vulnerability exists in the 'stbiloadmain' function in stbimage.h version 2.23 used in libsixel and other products, which arises from a networked system or product that does not properly validate data boundaries when executing an operation in...

PT-2019-15952 · Stb +1 · Stb Image.H +1

Name of the Vulnerable Software and Affected Versions: stb image.h aka the stb image loader version 2.23 Description: The issue is a heap-based buffer over-read in the stbi load main function. This problem affects products that use the stb image loader, including libsixel. Recommendations: For...

DEBIAN-CVE-2019-13223

A reachable assertion in the lookup1values function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

DEBIAN-CVE-2019-13222

An out-of-bounds read of a global buffer in the drawline function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...

DEBIAN-CVE-2019-13219

A NULL pointer dereference in the getwindow function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

DEBIAN-CVE-2019-13220

Use of uninitialized stack variables in the startdecoder function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...

DEBIAN-CVE-2019-13221

A stack buffer overflow in the computecodewords function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file...