OSV-2023-1103

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1103

Published

2023-11-03T13:00:16.931853Z

Modified

2023-11-03T13:00:16.932069Z

Summary

Heap-buffer-overflow in OpenType::be_u32

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63777

Crash type: Heap-buffer-overflow READ 1
Crash state:
OpenType::be_u32
OpenType::Cmap::subtable
OpenType::Font::try_load_from_offset

References

Affected packages

Type: GIT
Repo: https://github.com/SerenityOS/serenity
Events: Introduced

c0b2fa74ace4a79ffaed4b7d57032e6586b54d97

Fixed

7976e1852ce38b7d66b5255b4523036fe611a964

{
    "severity": "MEDIUM"
}

{
    "fixed_range": "9f50c2c718f08c12caef93533b417dbd6d4e45ea:7976e1852ce38b7d66b5255b4523036fe611a964"
}