{"id":"OSV-2023-160","summary":"Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800\n\n```\nCrash type: Global-buffer-overflow READ 2\nCrash state:\nOT::gvar::accelerator_t::apply_deltas_to_points\nbool OT::glyf_impl::Glyph::get_points\u003cOT::glyf_accelerator_t\u003e\nbool OT::glyf_impl::Glyph::get_points\u003cOT::glyf_accelerator_t\u003e\n```\n","modified":"2023-03-10T13:01:50.295694Z","published":"2023-03-10T13:01:50.295470Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800"}],"affected":[{"package":{"name":"harfbuzz","ecosystem":"OSS-Fuzz","purl":"pkg:generic/harfbuzz"},"ranges":[{"type":"GIT","repo":"https://github.com/harfbuzz/harfbuzz.git","events":[{"introduced":"f325aba561335a4f0f3c71aa59e42f1a23c774f2"},{"fixed":"552290f60437ceaa5aa299a2db726046c0385f80"},{"fixed":"28b05e1cb6116b07b95af799ff68b883c3f590d1"}]}],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2023-160.yaml","fixed_range":"7327006d686c149cefdc7ee6047d2b426ac1ac75:28b05e1cb6116b07b95af799ff68b883c3f590d1","introduced_range":"b4b089c4278f041f69c3253f84901de226d38558:7327006d686c149cefdc7ee6047d2b426ac1ac75"}}],"schema_version":"1.7.3"}