Stb Truetype.H
Approved changes feed: RSS · Atom
cpe:2.3:a:nothings:stb_truetype.h:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nothings (fa9895af-3c4e-566d-93ad-91443ad5c8ab) |
|---|---|
| Product | Stb Truetype.H (9edddd64-43b0-5134-98d7-d70e4060cc3e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nothings/stb |
purl2cpe | 2026-06-01 10:15:22.240475 |
pkg:rpm/fedora/stb |
purl2cpe | 2026-06-01 10:15:22.240479 |
pkg:rpm/opensuse/stb |
purl2cpe | 2026-06-01 10:15:22.240482 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5315 |
vulnerable | 2026-06-08 08:07:03.545465 |
Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds
MEDIUM (4.3)
A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbtt__buf_get8 in the library stb_truetype.h of the component TTF File Handler. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-01T23:15:12.505Z
Updated: 2026-04-02T13:32:19.636Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5314 |
vulnerable | 2026-06-08 08:07:03.544718 |
Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds
MEDIUM (4.3)
A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-01T22:15:15.789Z
Updated: 2026-04-02T13:50:27.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6623 |
vulnerable | 2026-06-08 05:26:45.562901 |
Details available
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
Published: 2020-01-08T22:51:00.000Z
Updated: 2024-08-04T09:11:04.570Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6622 |
vulnerable | 2026-06-08 05:26:45.562586 |
Details available
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
Published: 2020-01-08T22:51:30.000Z
Updated: 2024-08-04T09:11:04.859Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6621 |
vulnerable | 2026-06-08 05:26:45.562295 |
Details available
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
Published: 2020-01-08T22:51:37.000Z
Updated: 2024-08-04T09:11:04.516Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6620 |
vulnerable | 2026-06-08 05:26:45.561830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6619 |
vulnerable | 2026-06-08 05:26:45.561420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6618 |
vulnerable | 2026-06-08 05:26:45.561008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6617 |
vulnerable | 2026-06-08 05:26:45.560603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.