Arbitrary Code Execution

harfbuzz is vulnerable to arbitrary code execution. A buffer over-read resulting from an inverted length check in hb-ot-font.cc allows an attacker to crash the application and potentially obtain arbitrary code execution...