Vulnerability in Sean Barrett (Nothings) Nothings Stb
CVE-2026-18497
A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbtt__GetGlyphShapeTT() function within the nothings stb_t…
Affected products
- Sean Barrett (Nothings) Nothings Stb — versions 1.26