Out-of-bounds Write Flaw in HarfBuzz Software from Google

CVE-2021-45931

What is CVE-2021-45931?

HarfBuzz version 2.9.0 is susceptible to an out-of-bounds write vulnerability that allows for potential unauthorized access and manipulation of memory. This flaw occurs within the hb_bit_set_invertible_t::set function, which is invoked from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy methods. Exploitation of this weakness can lead to application instability or arbitrary code execution. It is crucial for users and administrators to apply the necessary patches to mitigate the risks associated with this vulnerability.

References