OSV-2018-129

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2018-129.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2018-129

Published

2021-01-13T00:00:57.916141Z

Modified

2022-04-13T03:04:32.974311Z

Summary

Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11657

Crash type: Heap-buffer-overflow READ 2
Crash state:
BEInt&lt;unsigned short, 2>::operator unsigned short
OT::IntType&lt;unsigned short, 2u>::operator unsigned int
CFF::Charset1_2&lt;OT::IntType&lt;unsigned char, 1u> >::get_glyph

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11657

Affected packages

OSS-Fuzz / harfbuzz

Package

Name: harfbuzz
Purl: pkg:generic/harfbuzz

Affected ranges

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

11d2f49af8f53340134c844173f4d8655b00dea3

Fixed

79e7e3445efef2dc57f8a10c7e355e802af08868

Ecosystem specific

{
    "severity": "MEDIUM"
}