CVE-2026-5315

A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbttbufget8 in the library stbtruetype.h of the component TTF File Handler. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. The exploit has been publicly...

PT-2020-19187

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier Description The issue is related to a heap-based buffer over-read in the stbtt buf get8 function. Recommendations For versions 1.22 and earlier, update to a version that fixes the heap-based buffer over-read issue...