A heap-buffer-overflow vulnerability in the nothings stb TrueType library allows attackers to potentially crash applications or disclose sensitive information via malformed font files.

The vulnerability exists in the stbtt__GetGlyphShapeTT() function, which fails to validate memory boundaries while iterating through glyph contour data. This leads to an out-of-bounds memory access when processing malformed TrueType (TTF) files.

Successful exploitation of this memory corruption vulnerability can lead to application crashes, causing service downtime, or potentially result in the unauthorized disclosure of information from the application memory. With a CVSS score of 7.1, this vulnerability poses a significant risk to any software utilizing this library to render user-supplied font files, as it allows for memory-based attacks.

Immediate Action: Update the nothings stb library to version 1.27 or later to incorporate the necessary boundary checks.

Proactive Monitoring: Monitor applications that parse external font files for unexpected crashes or error patterns that may indicate the processing of malicious TTF data.

Compensating Controls: Implement robust input validation and sandboxing for processes that handle untrusted font data to limit the impact of potential memory corruption exploits.

Public Exploit Available: Yes, public proof-of-concept code exists.

Developers and administrators must prioritize updating the nothings stb library to version 1.27 to remediate this heap-overflow risk. Given the existence of public proof-of-concept material, the window for potential exploitation is narrowing, making immediate patching essential to protect system stability and data integrity.