CVE-2026-18497 | Sean Barrett nothings stb up to 1.26 TrueType font file Parser stb_truetype.h stbtt__GetGlyphShapeTT heap-based overflow

A vulnerability classified as critical was found in Sean Barrett nothings stb up to 1.26. This vulnerability affects the function stbtt__GetGlyphShapeTT of the file stb_truetype.h of the component TrueType font file Parser. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is handled as CVE-2026-18497. The attack can be executed remotely. There is not any exploit available.