PT-2026-89155

An out-of-bounds read in the stbtt GetGlyphShape component of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service DoS via sending a crafted TTF file...

Linux Distros Unpatched Vulnerability : CVE-2026-5314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File...

CVE-2026-5315

A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbttbufget8 in the library stbtruetype.h of the component TTF File Handler. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. The exploit has been publicly...

DEBIAN-CVE-2026-5314

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made...

Linux Distros Unpatched Vulnerability : CVE-2020-6617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint. CVE-2020-6617 Note that Nessus relies on the presence of the package as reported by the...

CVE-2020-6623

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...

CVE-2022-25516

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbttfindtable at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

UBUNTU-CVE-2022-25516

DISPUTED stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbttfindtable at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

PT-2022-17345 · Unknown · Stb Truetype.H

Name of the Vulnerable Software and Affected Versions: stb truetype.h version 1.26 Description: A heap-buffer-overflow issue was discovered in the stbtt find table function at stb truetype.h. It is noted that the source code includes a disclaimer stating it should only be used with trusted input....

UBUNTU-CVE-2020-6618

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

UBUNTU-CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

PT-2020-19186

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to an assertion failure in the stbtt buf seek function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

PT-2020-19189

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to a heap-based buffer over-read in the stbtt buf peek8 function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

PT-2020-19187

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier Description The issue is related to a heap-based buffer over-read in the stbtt buf get8 function. Recommendations For versions 1.22 and earlier, update to a version that fixes the heap-based buffer over-read issue...

PT-2020-19184

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier Description The issue is related to an assertion failure in the stbtt cff int function. Recommendations For versions 1.22 and earlier, update to a version that fixes the assertion failure in the stbtt cff int...

PT-2020-19190

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to an assertion failure in the stbtt cff get index function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

PT-2020-19185

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to a heap-based buffer over-read in the stbtt find table function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...