harfbuzz:hb-subset-fuzzer: Negative-size-param in OT::VarRegionList* hb_serialize_context_t::allocate_size<OT::VarRegionList>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5362189182566400 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

harfbuzz:hb-subset-fuzzer: Negative-size-param in OT::VarRegionList* hb_serialize_context_t::allocate_size<OT::VarRegionList>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6313750058631168 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

harfbuzz:hb-subset-fuzzer: Negative-size-param in OT::VarRegionList* hb_serialize_context_t::allocate_size<OT::VarRegionList>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5499162606043136 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

OSV-2020-243 Heap-buffer-overflow in OT::VarRegionList::serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19956 Crash type: Heap-buffer-overflow READ 12 Crash state: OT::VarRegionList::serialize OT::VariationStore::serialize bool OT::HVARVVAR::subset...

PT-2020-22204

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 12 crash has been reported. The crash involves the OT::VarRegionList::serialize, OT::VariationStore::serialize, and bool...