Stb truetype.h

This hub aggregates every CVE we track for Stb truetype.h, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Stb truetype.h.

• CVE-2026-5315Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds4.3Apr 1, 2026
• CVE-2026-5314Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds4.3Apr 1, 2026
• CVE-2022-25516stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a di...6.5Mar 17, 2022
• CVE-2022-25515stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer...6.5Mar 17, 2022
• CVE-2022-25514stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaime...7.5Mar 17, 2022
• CVE-2020-6617stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.8.8Jan 8, 2020
• CVE-2020-6618stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.8.8Jan 8, 2020
• CVE-2020-6619stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.8.8Jan 8, 2020
• CVE-2020-6620stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.8.8Jan 8, 2020
• CVE-2020-6621stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.8.8Jan 8, 2020
• CVE-2020-6622stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.8.8Jan 8, 2020
• CVE-2020-6623stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.8.8Jan 8, 2020