Medium severity6.5NVD Advisory· Published Mar 17, 2022· Updated Jun 17, 2026
CVE-2022-25515
CVE-2022-25515
Description
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:nothings:stb_truetype.h:1.26:*:*:*:*:*:*:*
- stb_truetype.h/stb_truetype.hdescription
Patches
Vulnerability mechanics
References
2- github.com/nothings/stb/issues/1286nvdExploitIssue TrackingThird Party Advisory
- github.com/nothings/stb/issues/1288nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.