PT-2020-19184 · Stb · Stb

Sleicaspero · Published 2020-01-08 · Updated 2020-01-10 · CVE-2020-6617

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier

Description The issue is related to an assertion failure in the stbtt cff int function.

Recommendations For versions 1.22 and earlier, update to a version that fixes the assertion failure in the stbtt cff int function.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2020-6617

Affected Products

Stb

References · 6

• 🔥 https://github.com/nothings/stb/issues/864 · Exploit
• https://ubuntu.com/security/CVE-2020-6617 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-6617 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6617 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-6617 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-6617 · Security Note