{"id":"OSV-2026-1121","aliases":[],"status":"published","title":"Heap-buffer-overflow in cairo_type1_font_subset_for_each_glyph","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=542872505\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ncairo_type1_font_subset_for_each_glyph\n_cairo_type1_subset_init\n_cairo_pdf_surface_emit_unscaled_font_subset\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-08-07T00:22:32.743884Z","modified":"2026-11-06T14:30:06Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"poppler","ranges":[{"type":"GIT","events":[{"introduced":"64ea4dce5324ce3be10e82a2ba2a4037ab353290"}]}],"versions":["poppler-26.02.0","poppler-26.03.0","poppler-26.04.0","poppler-26.05.0","poppler-26.06.0","poppler-26.07.0","poppler-26.08.0","poppler-26.09.0","poppler-26.10.0","poppler-26.11.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=542872505","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2026-1121","title":"Heap-buffer-overflow in cairo_type1_font_subset_for_each_glyph","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=542872505\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ncairo_type1_font_subset_for_each_glyph\n_cairo_type1_subset_init\n_cairo_pdf_surface_emit_unscaled_font_subset\n```\n","status":"published","published":"2026-08-07T00:22:32.743884Z","modified":"2026-11-06T14:30:06.657354269Z","updated_at":"2026-11-06T14:57:06.730583Z"}]}}