CVE Vulnerability

CWE-125

CVE-2020-6620

by

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.

CVE-2020-6621

by

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.

CVE-2020-6622

by

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.

CVE-2020-6624

by

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.

CVE-2020-6625

by

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

CVE-2020-6628

by

Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.