CVE-2020-6621
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
Published Updated
PatchFirst · Latest vulnerabilities
libstb vulnerabilities · Page 3
Vulnerabilities published for libstb in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 45
CVE-2020-6622
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
Published UpdatedCVE-2020-6623
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
Published UpdatedCVE-2019-15058
stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load, leading to Information Disclosure or Denial of Service.
Published UpdatedCVE-2018-1000050
Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.