CyberSecBulletin

Sean Barrett (nothings) vulnerabilities

We track 1 vulnerability in Sean Barrett (nothings) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Sean Barrett (nothings) vulnerabilities

  • 7.1 High severity

    nothings stb: Heap-based Buffer Overflow

    CVE-2026-18497Sean Barrett (nothings)

    A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbtt__GetGlyphShapeTT() function within the nothings stb_truetype.h library whe