CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/03/2022 |
| CVE-2022-25515 | MEDIUM6.5 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input. | 17/03/2022 |
| CVE-2022-25514 | HIGH7.5 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input. | 17/03/2022 |
| CVE-2020-6623 | HIGH8.8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. | 08/01/2020 |
| CVE-2020-6622 | HIGH8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. | 08/01/2020 |
| CVE-2020-6621 | HIGH8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. | 08/01/2020 |
| CVE-2020-6620 | HIGH8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. | 08/01/2020 |
| CVE-2020-6619 | HIGH8.8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. | 08/01/2020 |
| CVE-2020-6618 | HIGH8.8 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. | 08/01/2020 |
| CVE-2020-6617 | HIGH8.8 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. | 08/01/2020 |