OSV-2018-108

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2018-108.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2018-108

Published

2021-01-13T00:00:47.924143Z

Modified

2022-04-13T03:04:33.264144Z

Summary

UNKNOWN READ in BEInt<int, 4>::operator int

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10898

Crash type: UNKNOWN READ
Crash state:
BEInt&lt;int, 4>::operator int
hb_kern_machine_t<AAT::KerxSubTableFormat6::accelerator_t>::kern
AAT::KerxSubTableFormat6::apply

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10898

Affected packages

OSS-Fuzz / harfbuzz

Package

Name: harfbuzz
Purl: pkg:generic/harfbuzz

Affected ranges

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

ab1f30bd059f1d2270793e9726b60666b328d2b8

Fixed

0f85edb7781f4d5ec2de676979be75a0f6559d80

Ecosystem specific

{
    "severity": "MEDIUM",
    "fixed_range": "ab1f30bd059f1d2270793e9726b60666b328d2b8:0f85edb7781f4d5ec2de676979be75a0f6559d80"
}