OSV-2020-704

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2020-704.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-704

Published

2020-07-01T00:00:25.806258Z

Modified

2022-04-13T03:04:32.924555Z

Summary

Heap-buffer-overflow in BEInt<unsigned char, 1>::set

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13736

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
BEInt&lt;unsigned char, 1>::set
CFF::CFFIndex&lt;OT::IntType&lt;unsigned int, 4u> >::set_offset_at
bool CFF::FDArray&lt;OT::IntType&lt;unsigned int, 4u> >::serialize&lt;CFF::cff2_font_dict

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13736

Affected packages

OSS-Fuzz / harfbuzz

Package

Name: harfbuzz
Purl: pkg:generic/harfbuzz

Affected ranges

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

8aaab78efcac81a05ec919be13792c98741ea1b5

Fixed

bcb4e505d6ffe33e3268a06698e75d6be0e64957

Introduced

5bbe78a0f353bb806a686fd97ad411fa8a9ebf5b

Ecosystem specific

{
    "severity": "HIGH"
}