CVE:CVE-2021-45931
CNNVD:CNNVD-202201-020
HarfBuzz是一款用于OpenType字体的文本引擎。
HarfBuzz 2.9.0 存在安全漏洞，该漏洞源于在 hb_bit_set_invertible_t::set 中有一个越界写入。
solution:Upgrade harfbuzz_project harfbuzz to a higher version than 2.9.0,and avoid the version 2.9.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35