Priority MEDIUM 57
A vulnerability was determined in Nothings stb up to 1.26.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00515 · Published 2026-04-01 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Nothings stb up to 1.26.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0069 · Published 2026-04-01 · No fix listed CWE-119
Priority LOW 31
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00937 · Published 2022-03-17 · No fix listed CWE-787
Priority LOW 31
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00937 · Published 2022-03-17 · No fix listed CWE-787
Priority HIGH 66
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01037 · Published 2022-03-17 · No fix listed CWE-120
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01142 · Published 2020-01-08 · No fix listed CWE-617
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01142 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01142 · Published 2020-01-08 · No fix listed CWE-617
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01143 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 40
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01143 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 41
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01446 · Published 2020-01-08 · No fix listed CWE-125
Priority MEDIUM 41
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01454 · Published 2020-01-08 · No fix listed CWE-617