Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9
Exploited now
nothings records in CISA KEVNo nothings vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 66
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01037 · Published 2022-03-17 · No fix listed CWE-120
Priority MEDIUM 57
A vulnerability was determined in Nothings stb up to 1.26.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00515 · Published 2026-04-01 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Nothings stb up to 1.26.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0069 · Published 2026-04-01 · No fix listed CWE-119
Priority MEDIUM 41
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01454 · Published 2020-01-08 · No fix listed CWE-617
Priority MEDIUM 41
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01446 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01143 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01143 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01142 · Published 2020-01-08 · No fix listed CWE-617
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01142 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01142 · Published 2020-01-08 · No fix listed CWE-617
Priority LOW 31
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00937 · Published 2022-03-17 · No fix listed CWE-787
Priority LOW 31
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00937 · Published 2022-03-17 · No fix listed CWE-787
THREATIST.IORead the docs