https://bugzilla.redhat.com/show_bug.cgi?id=2036820
--- Doc Text *updated* by RaTasha Tillery-Smith rtillery@redhat.com --- An out-of-bounds write flaw was found in HarfBuzz, arising from a boundary error in the hb_bit_set_invertible_t::set() function when processing untrusted input. This flaw allows an attacker to create a specially crafted file, convince the victim to open it, and trigger an out-of-bounds write. In some cases, this issue could lead to the execution of arbitrary code on the target system or, more commonly, result in a denial of service attack.