Medium severity4.3NVD Advisory· Published Apr 1, 2026· Updated Apr 30, 2026
CVE-2026-5314
CVE-2026-5314
Description
A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
4- gist.github.com/d0razi/cb31a92f3205a4373f19b7da25946848nvdExploitThird Party Advisory
- vuldb.com/submit/780558nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/354646nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/354646/ctinvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.