OSV-2021-1153

    Dashboard / Vulnerabilities / OSV-2021-1153

    OSV-2021-1153

    Published: 20 Aug 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37348 ``` Crash type: Heap-buffer-overflow READ 4 Crash state: hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned OT::UnsizedArrayOf<OT::IntType<unsigned int, 4u> >::copy _hb_head_t<OT::UnsizedArrayOf<OT::IntType<unsigned int, 4u> >*, decltype ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37348

    Affected packages

    Package

    Name: harfbuzz

    Purl: pkg:generic/harfbuzz

    Affected ranges

    Type: GIT

    Events:

    Introduced- a6c6cda48608e988a7debc3c18597186e3b4e2ee
    Fixed -829b0f33531b3c14b2e08331b8cc5b31fed73129

    Affected versions

    2.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1153 | CVE-DB