{"id":"OSV-2022-1209","aliases":[],"status":"published","title":"Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nOT::hb_ot_apply_context_t::skipping_iterator_t::next\nOT::Layout::GSUB_impl::Ligature\u003cOT::Layout::SmallTypes\u003e::apply\nbool OT::hb_accelerate_subtables_context_t::apply_to\u003cOT::Layout::GSUB_impl::Liga\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-11-25T13:00:49.966315Z","modified":"2022-11-25T13:00:49Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"harfbuzz","ranges":[{"type":"GIT","events":[{"introduced":"1fa64c0c23ed86d60117198420587aee81fdc8d8"},{"fixed":"4c49daf7cd961fb47126baf04240243736cae606"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-1209","title":"Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nOT::hb_ot_apply_context_t::skipping_iterator_t::next\nOT::Layout::GSUB_impl::Ligature\u003cOT::Layout::SmallTypes\u003e::apply\nbool OT::hb_accelerate_subtables_context_t::apply_to\u003cOT::Layout::GSUB_impl::Liga\n```\n","status":"published","published":"2022-11-25T13:00:49.966315Z","modified":"2022-11-25T13:00:49.966564Z","updated_at":"2026-11-02T15:52:49.275624Z"}]}}