OSV-2020-1559

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2020-1559.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-1559

Published

2020-08-01T00:00:38Z

Modified

2022-04-13T03:04:33Z

Summary

UNKNOWN WRITE in hb_vector_t<CFF::parsed_cs_op_t>::resize

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24532

Crash type: UNKNOWN WRITE
Crash state:
hb_vector_t<CFF::parsed_cs_op_t>::resize
hb_vector_t<CFF::parsed_cs_op_t>::push
CFF::parsed_values_t<CFF::parsed_cs_op_t>::add_op

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24532

Affected packages

OSS-Fuzz / harfbuzz

Package

Name: harfbuzz
Purl: pkg:generic/harfbuzz

Affected ranges

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

c33e8006fdaec3b4acf8927c75e04129e0410a59

Fixed

32f052b033f12fbeb8741c9616860743b1f567c4

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2020-1559.yaml"