Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 12:58 a.m.5 views

CVE-2022-25514

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

7.5CVSS7.5AI score0.00303EPSS
Exploits1References1
Snyk
Snyk
added 2022/03/17 1:28 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the function ttUSHORT at stbtruetype.h. Remediation There is no fixed version for stb. References - GitHub Issue...

7.5CVSS7.1AI score0.00303EPSS
Exploits1References2
OSV
OSV
added 2022/03/17 1:15 a.m.2 views

CVE-2022-25514

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

7.5CVSS7.1AI score0.00303EPSS
Exploits1References1
NVD
NVD
added 2022/03/17 1:15 a.m.9 views

CVE-2022-25514

stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

7.5CVSS0.00303EPSS
Exploits1References1
Prion
Prion
added 2022/03/17 1:15 a.m.12 views

Heap overflow

DISPUTED stbtruetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT at stbtruetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input...

5CVSS7.6AI score0.00303EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.2 views

stb_truetype.h 缓冲区错误漏洞

stbtruetype.h is a TTF font parsing library. A buffer error vulnerability exists in stbtruetype.h v1.26, which stems from the function ttUSHORT in stbtruetype.h containing a heap buffer overflow...

7.5CVSS7.7AI score0.00303EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/03/17 12:0 a.m.2 views

PT-2022-17343 · Unknown · Stb Truetype.H

Name of the Vulnerable Software and Affected Versions: stb truetype.h version 1.26 Description: A heap-buffer-overflow issue was discovered in the ttUSHORT function at stb truetype.h. It is noted that the source code includes a disclaimer stating it should only be used with trusted input. A third...

7.5CVSS7.4AI score0.00303EPSS
Exploits1References8
Rows per page
Query Builder