CVE-2020-6623

HIGH

stb_truetype.h < 1.22 - Reachable Assertion in stbtt__cff_get_index

Title source: llm

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 8.8

EPSS 0.0145

EPSS Percentile 70.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-617

Status published

Products (1)

nothings/stb_truetype.h < 1.22

Published Jan 08, 2020

Tracked Since Feb 18, 2026