CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.

References

Affected packages

Git / github.com/googlefonts/sfntly

Affected ranges

Type: GIT
Repo: https://github.com/googlefonts/sfntly
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

468cad540fa1b0027cad60456f53feabecdce2bc

Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c56b85408bab232efd7e650f0994272a174e3b92

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-1709.json"

vanir_signatures

[
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "170029085547778279417579771415956539123",
                "250354549007859814336946905011229912979",
                "157197421140623769032716562782355974175",
                "233073006098525803712195288994297990717"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "source": "https://github.com/googlefonts/sfntly/commit/c56b85408bab232efd7e650f0994272a174e3b92",
        "id": "CVE-2016-1709-06a3d960",
        "target": {
            "file": "cpp/src/sfntly/data/byte_array.cc"
        }
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 77.0,
            "function_hash": "93679370228582351076798440583379324849"
        },
        "signature_version": "v1",
        "source": "https://github.com/googlefonts/sfntly/commit/c56b85408bab232efd7e650f0994272a174e3b92",
        "id": "CVE-2016-1709-30a3b8f8",
        "target": {
            "file": "cpp/src/sfntly/data/byte_array.cc",
            "function": "ByteArray::Get"
        }
    }
]