{"id":"OSV-2022-1212","aliases":[],"status":"published","title":"Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nOT::hb_ot_apply_context_t::skipping_iterator_t::next\nbool OT::match_input\u003cOT::IntType\u003cunsigned short, 2u\u003e \u003e\nbool OT::context_apply_lookup\u003cOT::IntType\u003cunsigned short, 2u\u003e \u003e\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-11-26T13:00:53.392207Z","modified":"2022-11-26T13:00:53Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"harfbuzz","ranges":[{"type":"GIT","events":[{"introduced":"1fa64c0c23ed86d60117198420587aee81fdc8d8"},{"fixed":"4c49daf7cd961fb47126baf04240243736cae606"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-1212","title":"Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nOT::hb_ot_apply_context_t::skipping_iterator_t::next\nbool OT::match_input\u003cOT::IntType\u003cunsigned short, 2u\u003e \u003e\nbool OT::context_apply_lookup\u003cOT::IntType\u003cunsigned short, 2u\u003e \u003e\n```\n","status":"published","published":"2022-11-26T13:00:53.392207Z","modified":"2022-11-26T13:00:53.392505Z","updated_at":"2026-11-02T15:52:49.275624Z"}]}}