OSV-2022-108

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-108

Published

2022-01-31T00:01:43.533565Z

Modified

2022-07-18T02:26:29.025862Z

Summary

Heap-buffer-overflow in void apply_string<GSUBProxy>

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44212

Crash type: Heap-buffer-overflow READ 2 Crash state: void applystring<GSUBProxy> void hbotmapt::apply<GSUBProxy> hbotmap_t::substitute

References

Affected packages

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

a75b96f7e5833c9206f6a15d11168a757a85ee59

Fixed

5363e40de13425938bc833ae2b6c1d9d565bcf65

3.1.2

3.2.0

3.3.0

3.3.1

3.3.2

3.4.0

4.0.0

4.0.1

4.1.0

4.2.0

4.2.1

4.3.0

4.4.0

4.4.1

{
    "severity": "MEDIUM"
}

{
    "fixed_range": "d8f9d517801c5c361f329764329731bc0bde950f:5363e40de13425938bc833ae2b6c1d9d565bcf65"
}