Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Stb Truetype.h
HIGH 8.8
CVE-2020-6620
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
Fix: after 1.22
Fix from $1,950
2020-01-08
Stb Truetype.h
HIGH 8.8
CVE-2020-6621
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
Fix: after 1.22
Fix from $1,950
2020-01-08
Stb Truetype.h
HIGH 8.8
CVE-2020-6622
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
Fix: after 1.22
Fix from $1,950
2020-01-08
Stb Truetype.h
HIGH 8.8
CVE-2020-6623
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
Fix: after 1.22
Fix from $1,950
2020-01-08
Stb Image.h
MEDIUM 6.5
CVE-2019-20056
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.
No fix yet
Fix from $1,600
2019-12-29
Stb Image.h
HIGH 8.8
CVE-2019-19777
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
No fix yet
Fix from $1,950
2019-12-13