{"id":"OSV-2018-143","aliases":[],"status":"published","title":"Global-buffer-overflow in CFF::BlendArg::set_blends","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11714\n\n```\nCrash type: Global-buffer-overflow READ 8\nCrash state:\nCFF::BlendArg::set_blends\nCFF::CFF2CSOpSet\u003cCFF2CSOpSet_SubrSubset, CFF::SubrSubsetParam, CFF::PathProcsNul\nCFF2CSOpSet_SubrSubset::process_op\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-01-13T00:01:01.54034Z","modified":"2022-04-13T03:35:31Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"harfbuzz","ranges":[{"type":"GIT","events":[{"introduced":"0996c0ff6279f377e2b14f08663df2ce82de2b14"},{"fixed":"14d29a10437205566c4bd7bcfa2282d34d9f4f2f"}]}],"versions":["2.1.2","2.1.3","2.2.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11714","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2018-143","title":"Global-buffer-overflow in CFF::BlendArg::set_blends","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11714\n\n```\nCrash type: Global-buffer-overflow READ 8\nCrash state:\nCFF::BlendArg::set_blends\nCFF::CFF2CSOpSet\u003cCFF2CSOpSet_SubrSubset, CFF::SubrSubsetParam, CFF::PathProcsNul\nCFF2CSOpSet_SubrSubset::process_op\n```\n","status":"published","published":"2021-01-13T00:01:01.54034Z","modified":"2022-04-13T03:35:31.377146Z","updated_at":"2026-11-02T15:52:47.981622Z"}]}}