OSV-2023-372

    Dashboard / Vulnerabilities / OSV-2023-372

    OSV-2023-372

    Published: 6 May 2023Last Modified: 6 May 2023

    Summary: UNKNOWN WRITE in hb_ot_layout_substitute_start

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58626 ``` Crash type: UNKNOWN WRITE Crash state: hb_ot_layout_substitute_start _hb_ot_shape hb_shape_plan_execute ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58626

    Affected packages

    Package

    Name: harfbuzz

    Purl: pkg:generic/harfbuzz

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8a8fc37c42135b3ed524e4179bcc4add854ae195
    Fixed -319a488b3903cf92c3b45d1772717168a10f94d7

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-372 | CVE-DB