Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 12:58 a.m.5 views

CVE-2022-25515

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS7.5AI score0.0026EPSS
Exploits1References1
Snyk
Snyk
added 2022/03/17 1:33 p.m.2 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the function ttULONG at stbtruetype.h. Remediation There is no fixed version for stb. References - GitHub Issue...

7.3CVSS7.1AI score0.0026EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/17 1:15 a.m.0 views

CVE-2022-25515

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS5.5AI score0.0026EPSS
Exploits1References3
OSV
OSV
added 2022/03/17 1:15 a.m.2 views

CVE-2022-25515

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS5.8AI score0.0026EPSS
Exploits1References2
NVD
NVD
added 2022/03/17 1:15 a.m.9 views

CVE-2022-25515

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

6.5CVSS0.0026EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.0 views

stb_truetype.h 缓冲区错误漏洞

stbtruetype.h is a TTF font parsing library. A buffer error vulnerability exists in stbtruetype.h v1.26, which stems from a heap buffer overflow in the function ttULONG in stbtruetype.h. The vulnerability is caused by a heap buffer overflow in the stbtruetype.h function...

6.5CVSS6.7AI score0.0026EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/03/17 12:0 a.m.2 views

PT-2022-17344 · Unknown · Stb Truetype.H

Name of the Vulnerable Software and Affected Versions: stb truetype.h version 1.26 Description: A heap-buffer-overflow issue was discovered in stb truetype.h via the function ttULONG. It is noted that the source code includes a disclaimer stating it should only be used with trusted input. A third...

6.5CVSS7.2AI score0.0026EPSS
Exploits1References7
Rows per page
Query Builder