OSV-2023-170

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-170

Published

2023-03-13T13:00:54.744253Z

Modified

2023-03-16T14:25:44.765201Z

Summary

Invalid-free in hb_free_impl

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952

Crash type: Invalid-free
Crash state:
hb_free_impl
OT::glyf::_free_compiled_subset_glyphs
OT::glyf::_populate_subset_glyphs

References

Affected packages

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz.git
Events: Introduced

c0fac016dc017596e2d979e19e1eb8f88df38ea3

Fixed

75e6498d9a8b600ab7f00b3d279f1054dd72feec

7.1.0

{
    "severity": null
}