OSV-2023-458

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2023-458.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-458
Published
2023-06-05T14:01:54.285948Z
Modified
2023-06-05T14:01:54.286189Z
Summary
Invalid-free in hb_free_impl
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59592

Crash type: Invalid-free
Crash state:
hb_free_impl
OT::glyf::_free_compiled_subset_glyphs
OT::glyf::subset
References

Affected packages

OSS-Fuzz / harfbuzz

Package

Name
harfbuzz
Purl
pkg:generic/harfbuzz

Affected ranges

Type
GIT
Repo
https://github.com/harfbuzz/harfbuzz.git
Events
Introduced
3d08a2f10cada7c72513d9491ddf66820ef008fb
Fixed
af3fdf1f9e09fb7e47d4528d81fd510730b80745

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2023-458.yaml"