OSV-2021-1310

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1310

Published

2021-09-18T00:00:25.727046Z

Modified

2022-04-13T03:04:33.258700Z

Summary

Heap-use-after-free in hb_resolve_overflows

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38878

Crash type: Heap-use-after-free READ 4
Crash state:
hb_resolve_overflows
_repack
hb_subset_or_fail

References

Affected packages

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

3844e58e14f6f528c52df06d49c771dd174730b9

Fixed

74f96d9d4b359fc138d21709c975a09ba933fb3d

2.9.1

3.0.0

{
    "severity": "HIGH"
}