OSV-2018-161

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2018-161.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2018-161
Published
2021-01-13T00:01:07.793293Z
Modified
2022-04-13T03:04:32.930471Z
Summary
Heap-buffer-overflow in BEInt<unsigned short, 2>::set
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11081

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
BEInt&lt;unsigned short, 2>::set
OT::Script::subset
void OT::OffsetTo&lt;OT::Script, OT::IntType&lt;unsigned short, 2u>, true>::serialize_
References

Affected packages

OSS-Fuzz / harfbuzz

Package

Name
harfbuzz
Purl
pkg:generic/harfbuzz

Affected ranges

Type
GIT
Repo
https://github.com/harfbuzz/harfbuzz.git
Events
Introduced
5f17dbc3025093308d2191a4abd2eec24db35c0e
Fixed
aa5af8d041521507f8bc8ded8a365ee56098388c

Affected versions

1.*

1.9.0

2.*

2.0.0
2.0.1
2.0.2

Ecosystem specific 

{
    "severity": "HIGH"
}