Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.
CVSS Details
- CVSS 3.1 Base Score: 7.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade harfbuzz | Jul 30, 2024 | Jan 25, 2016 |
| Gentoo Linux | — | Upgrade media-libs/harfbuzz. | Oct 30, 2017 | Jan 25, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jan 29, 2016 | Jan 25, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 24, 2016 |
| Suse | — | Upgrade libreoffice-l10n-ltUpgrade myspell-es_MXUpgrade myspell-fr_CAUpgrade libreoffice-icon-theme-tangoUpgrade myspell-en_PHUpgrade myspell-sr_Latn_CSUpgrade myspell-ar_TNUpgrade libreoffice-l10n-koUpgrade myspell-lightproof-ru_RUUpgrade myspell-et_EEUpgrade libreoffice-l10n-svUpgrade myspell-nb_NOUpgrade libreoffice-l10n-huUpgrade myspell-bn_INUpgrade myspell-es_ARUpgrade libreoffice-mathUpgrade myspell-ar_SYUpgrade myspell-en_GBUpgrade myspell-ar_MAUpgrade libreoffice-l10n-hiUpgrade myspell-ar_BHUpgrade myspell-de_ATUpgrade myspell-es_PYUpgrade myspell-teUpgrade myspell-bsUpgrade libreoffice-l10n-arUpgrade libreoffice-drawUpgrade libmwaw-develUpgrade myspell-en_NAUpgrade myspell-sk_SKUpgrade myspell-fr_FRUpgrade myspell-pl_PLUpgrade myspell-es_BOUpgrade myspell-en_JMUpgrade myspell-es_PAUpgrade myspell-es_CUUpgrade myspell-bg_BGUpgrade libixion-develUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-itUpgrade libreoffice-baseUpgrade libreoffice-l10n-afUpgrade myspell-en_NZUpgrade libreoffice-writer-extensionsUpgrade liborcus-0_12-0Upgrade libreoffice-l10n-pt_BRUpgrade myspell-be_BYUpgrade myspell-sv_SEUpgrade myspell-hr_HRUpgrade libreoffice-calc-extensionsUpgrade myspell-hu_HUUpgrade myspell-en_AUUpgrade libmwaw-devel-docUpgrade libreoffice-icon-theme-galaxyUpgrade liborcus-develUpgrade libreoffice-l10n-daUpgrade myspell-ro_ROUpgrade myspell-en_ZWUpgrade libreoffice-sdkUpgrade myspell-ar_DZUpgrade myspell-en_GHUpgrade myspell-es_PRUpgrade myspell-ru_RUUpgrade myspell-nl_NLUpgrade myspell-sv_FIUpgrade myspell-ar_QAUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-gnomeUpgrade myspell-gu_INUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-zuUpgrade myspell-ca_ITUpgrade myspell-fr_LUUpgrade myspell-af_NAUpgrade libreoffice-writerUpgrade libreoffice-base-drivers-postgresqlUpgrade libmwaw-0_3-3Upgrade myspell-lightproof-hu_HUUpgrade myspell-ca_FRUpgrade myspell-es_CRUpgrade libreoffice-impressUpgrade myspell-pt_AOUpgrade libreoffice-pyunoUpgrade myspell-en_USUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-esUpgrade myspell-ar_SAUpgrade myspell-bn_BDUpgrade myspell-en_TTUpgrade myspell-ar_EGUpgrade myspell-lo_LAUpgrade myspell-bs_BAUpgrade myspell-zu_ZAUpgrade myspell-es_HNUpgrade myspell-pt_BRUpgrade libzmf-0_0-0Upgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-caUpgrade myspell-ar_IQUpgrade libreoffice-l10n-nlUpgrade myspell-te_INUpgrade myspell-ar_OMUpgrade myspell-es_UYUpgrade myspell-it_ITUpgrade myspell-ca_ES_valenciaUpgrade myspell-ca_ADUpgrade myspell-es_PEUpgrade libreoffice-base-drivers-mysqlUpgrade myspell-es_DOUpgrade myspell-en_ZAUpgrade libreofficekitUpgrade libreoffice-l10n-plUpgrade myspell-ar_KWUpgrade myspell-uk_UAUpgrade myspell-en_MWUpgrade libreoffice-l10n-ruUpgrade myspell-deUpgrade myspell-sl_SIUpgrade myspell-esUpgrade myspell-es_COUpgrade myspell-en_IEUpgrade myspell-ca_ESUpgrade myspell-vi_VNUpgrade myspell-fr_BEUpgrade libixion-0_12-0Upgrade myspell-enUpgrade myspell-nl_BEUpgrade myspell-en_CAUpgrade myspell-es_GTUpgrade myspell-fr_MCUpgrade myspell-caUpgrade myspell-es_SVUpgrade myspell-ar_LBUpgrade myspell-arUpgrade myspell-es_CLUpgrade myspell-cs_CZUpgrade myspell-hi_INUpgrade libreofficeUpgrade myspell-sr_RSUpgrade myspell-ar_SDUpgrade myspell-es_ESUpgrade libreoffice-l10n-guUpgrade myspell-lt_LTUpgrade libreoffice-l10n-ukUpgrade myspell-srUpgrade myspell-sr_CSUpgrade libstaroffice-0_0-0Upgrade myspell-lightproof-enUpgrade myspell-ar_LYUpgrade libreoffice-mailmergeUpgrade myspell-he_ILUpgrade myspell-en_BSUpgrade myspell-es_VEUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-xhUpgrade libreoffice-officebeanUpgrade myspell-viUpgrade myspell-lightproof-pt_BRUpgrade myspell-noUpgrade myspell-pt_PTUpgrade myspell-sr_Latn_RSUpgrade libreoffice-l10n-pt_PTUpgrade myspell-es_NIUpgrade myspell-dictionariesUpgrade libreoffice-l10n-zh_TWUpgrade myspell-ar_AEUpgrade myspell-fr_CHUpgrade libreoffice-calcUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-frUpgrade myspell-es_ECUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-fiUpgrade myspell-roUpgrade myspell-da_DKUpgrade myspell-th_THUpgrade libreoffice-l10n-bgUpgrade myspell-en_INUpgrade myspell-af_ZAUpgrade myspell-de_DEUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-csUpgrade myspell-ar_YEUpgrade myspell-nn_NOUpgrade myspell-de_CHUpgrade myspell-el_GRUpgrade myspell-ar_JOUpgrade myspell-en_BZUpgrade myspell-lv_LV | Aug 26, 2016 | Jan 25, 2016 |
| Ubuntu | — | Upgrade libharfbuzz0bUpgrade liboxideqtcore0 | Feb 2, 2016 | Jan 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub