OSV-2023-1272

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2023-1272.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1272
Published
2023-12-09T00:05:42Z
Modified
2023-12-09T00:05:42Z
Summary
Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64859

Crash type: Heap-buffer-overflow READ 2
Crash state:
OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_
hb_ot_draw_glyph
hb_font_draw_glyph
References

Affected packages

OSS-Fuzz / harfbuzz

Package

Name
harfbuzz
Purl
pkg:generic/harfbuzz

Affected ranges

Type
GIT
Repo
https://github.com/harfbuzz/harfbuzz.git
Events
Introduced
bf84135edda601fdead430b231a9ce50d38837d2
Fixed
5b325c0ae9cdd7ca03c002d7cae92a6d17f5111b

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2023-1272.yaml"