{"id":"OSV-2018-115","aliases":[],"status":"published","title":"Global-buffer-overflow in CFF::BlendArg::set_blends","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11691\n\n```\nCrash type: Global-buffer-overflow READ 8\nCrash state:\nCFF::BlendArg::set_blends\nCFF::CFF2CSOpSet\u003cCFF2CSOpSet_Extents, ExtentsParam, CFF2PathProcs_Extents\u003e::proc\nCFF::CSInterpreter\u003cCFF::CFF2CSInterpEnv, CFF2CSOpSet_Extents, ExtentsParam\u003e::int\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-01-13T00:00:53.045964Z","modified":"2022-04-13T03:33:56Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"harfbuzz","ranges":[{"type":"GIT","events":[{"introduced":"7b21319edfd6531a444846f71e87303bc09f4621"},{"fixed":"72d8f76368b264a42fe58438fe15811d458a7935"}]}],"versions":["2.1.2","2.1.3","2.2.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11691","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2018-115","title":"Global-buffer-overflow in CFF::BlendArg::set_blends","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11691\n\n```\nCrash type: Global-buffer-overflow READ 8\nCrash state:\nCFF::BlendArg::set_blends\nCFF::CFF2CSOpSet\u003cCFF2CSOpSet_Extents, ExtentsParam, CFF2PathProcs_Extents\u003e::proc\nCFF::CSInterpreter\u003cCFF::CFF2CSInterpEnv, CFF2CSOpSet_Extents, ExtentsParam\u003e::int\n```\n","status":"published","published":"2021-01-13T00:00:53.045964Z","modified":"2022-04-13T03:33:56.47162Z","updated_at":"2026-11-02T15:52:47.981622Z"}]}}