OSV-2021-1518

    Dashboard / Vulnerabilities / OSV-2021-1518

    OSV-2021-1518

    Published: 1 Nov 2021Last Modified: 13 Apr 2022

    Summary: UNKNOWN READ in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40540 ``` Crash type: UNKNOWN READ Crash state: bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c OT::ClipList::serialize_clip_records OT::ClipList::subset ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40540

    Affected packages

    Package

    Name: harfbuzz

    Purl: pkg:generic/harfbuzz

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8c583db9b5c63dc790f6553044b8915e1f5906bb
    Fixed -0a7563a53ffedd735cb41c03f697269ef48f0ec2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1518 | CVE-DB