Nothings: Security Vulnerabilities
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
CVSS Score
8.8
EPSS Score
0.005
Published
2020-01-08
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
CVSS Score
8.8
EPSS Score
0.005
Published
2020-01-08
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
CVSS Score
8.8
EPSS Score
0.005
Published
2020-01-08
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
CVSS Score
8.8
EPSS Score
0.003
Published
2020-01-08
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
CVSS Score
8.8
EPSS Score
0.003
Published
2020-01-08
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.
CVSS Score
6.5
EPSS Score
0.005
Published
2019-12-29
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
CVSS Score
8.8
EPSS Score
0.004
Published
2019-12-13
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
CVSS Score
8.8
EPSS Score
0.003
Published
2018-09-12
Page 4