CVE-2022-25516

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbttfindtable at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

CVE-2022-25516

CVE-2022-25516 concerns the heap-buffer-overflow in the stb_truetype.h 1.26 library, triggered by the function stbtt__find_table . Multiple connected sources corroborate a heap-buffer-overflow in stb_truetype.h, with the core issue attributed to the table-finding routine and accompanied by a note...

CVE-2020-6618

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

Heap overflow

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

CVE-2020-6618

Removed by vendor...