Summary: stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.Published: Wednesday, January 8, 2020 - 23:15cvss: 5.0