Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
WebAssembly Browser Buffer Overflow Risk
published 6 years ago
Summary
Using certain WebAssembly files, a hacker might be able to cause a program to crash or behave unexpectedly. This issue affects WebAssembly browsers and tools that process WebAssembly files. Update your software to the latest version to fix this problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | harfbuzz | All versions |
Original advisory text
Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned short, 2u> const> hb_array_t<OT::IntType<unsigne
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18513
```
Crash type: Heap-buffer-overflow READ 2
Crash state:
hb_array_t<OT::IntType<unsigned short, 2u> const> hb_array_t<OT::IntType<unsigne
OT::UnsizedArrayOf<OT::IntType<unsigned short, 2u> >::copy
_ZN22hb_serialize_context_t5_copyIN2OT14UnsizedArrayOfINS1_7IntTypeItLj2EEEEEJRj
```
```
Crash type: Heap-buffer-overflow READ 2
Crash state:
hb_array_t<OT::IntType<unsigned short, 2u> const> hb_array_t<OT::IntType<unsigne
OT::UnsizedArrayOf<OT::IntType<unsigned short, 2u> >::copy
_ZN22hb_serialize_context_t5_copyIN2OT14UnsizedArrayOfINS1_7IntTypeItLj2EEEEEJRj
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18513 Third Party Advisory
Timeline
Published1 Jul 2020
Updated29 Mar 2026
First seen29 Mar 2026
Sources
OSV-2020-516 · OSV
Track software like this
Free during beta