Описание
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
Примечания
libstb non issue, stb_truetype.h explicitly marked as unsuitable for untrusted font files
The stb_truetype API does not know the length of the input font file and therefore cannot bounds check it.
https://github.com/nothings/stb/issues/865
EPSS
Процентиль: 55%
0.0032
Низкий
Связанные уязвимости
CVSS3: 8.8
ubuntu
около 6 лет назад
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
CVSS3: 8.8
nvd
около 6 лет назад
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
github
больше 3 лет назад
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
EPSS
Процентиль: 55%
0.0032
Низкий