OSV-2018-73.yaml

id: OSV-2018-73
summary: Stack-buffer-overflow in hb_array_t<char const>::cmp
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11908

  ```
  Crash type: Stack-buffer-overflow READ 4
  Crash state:
  hb_array_t<char const>::cmp
  OT::post::accelerator_t::cmp_key
  hb_bsearch_r
  ```
modified: '2022-04-13T03:04:32.941484Z'
published: '2021-01-13T00:00:35.135604Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11908
affected:
- package:
    name: harfbuzz
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/harfbuzz/harfbuzz.git
    events:
    - introduced: dcfa4a8d711716de88b94a370663e9564e3e7ccc
    - fixed: 8d2d41025619e24160ed80edd1c413168a2dda36
  ecosystem_specific:
    severity: MEDIUM
  versions: []