{"id":"OSV-2018-100","summary":"Heap-buffer-overflow in cff_parser_run","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10869\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\ncff_parser_run\ncff_subfont_load\ncff_font_load\n```\n","modified":"2022-04-13T03:04:34.877739Z","published":"2021-01-13T00:00:43.817225Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10869"}],"affected":[{"package":{"name":"freetype2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/freetype2"},"ranges":[{"type":"GIT","repo":"https://github.com/freetype/freetype2-testing.git","events":[{"introduced":"0c256f6e16eb73be1aef98197755e0e6bb4c56a9"},{"fixed":"7e045f03edb2a34b731c999c586a03a914502d88"}]}],"ecosystem_specific":{"fixed_range":"08b711d0182229d7e0a1e52cecf73660cb95addb:7e045f03edb2a34b731c999c586a03a914502d88","severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/freetype2/OSV-2018-100.yaml"}}],"schema_version":"1.7.3"}