HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade harfbuzz-icuUpgrade harfbuzz-debuginfoUpgrade harfbuzzUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debugsourceUpgrade harfbuzz-devel | Feb 17, 2025 | Jan 1, 2022 |
| Gentoo Linux | — | Upgrade media-libs/harfbuzz. | Sep 26, 2022 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub