https://bugzilla.redhat.com/show_bug.cgi?id=2036820
--- Doc Text *updated* by TEJ RATHI trathi@redhat.com --- HarfBuzz is susceptible to an out-of-bounds write flaw arising from a boundary error in the hb_bit_set_invertible_t::set() function when processing untrusted input. An attacker, by creating a specially crafted file and enticing the victim to open it, can trigger an out-of-bounds write. In some cases, this could lead to the execution of arbitrary code on the target system or, more commonly, result in a denial-of-service attack.