An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-icu | Nov 18, 2022 | Jun 23, 2022 |
| Alpine Linux | — | Upgrade harfbuzz | Mar 26, 2024 | Jun 22, 2022 |
| Amazon_linux_2023 | — | Upgrade harfbuzz-debuginfoUpgrade harfbuzz-icuUpgrade harfbuzz-develUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debugsourceUpgrade harfbuzzUpgrade harfbuzz-icu-debuginfo | Feb 17, 2025 | Jun 23, 2022 |
| Centos_linux | — | Upgrade harfbuzz-develUpgrade harfbuzz-debuginfoUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzzUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-icuUpgrade harfbuzz-debugsource | Nov 16, 2022 | Jun 23, 2022 |
| Debian | — | Upgrade harfbuzz | Jul 30, 2024 | Jun 23, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade media-libs/harfbuzz. | Sep 26, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade harfbuzz-helpUpgrade harfbuzzUpgrade harfbuzz-devel | Nov 3, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade harfbuzz-helpUpgrade harfbuzzUpgrade harfbuzz-devel | Sep 14, 2022 | Jun 23, 2022 |
| Oracle_linux | — | Upgrade harfbuzz-icuUpgrade harfbuzzUpgrade harfbuzz-devel | Nov 22, 2022 | Jun 23, 2022 |
| Redhat_linux | — | Upgrade harfbuzzUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-icuUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-develUpgrade harfbuzz-debugsourceUpgrade harfbuzz-debuginfo | Nov 16, 2022 | Jun 23, 2022 |
| Rocky_linux | — | Upgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debugsourceUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzzUpgrade harfbuzz-develUpgrade harfbuzz-icuUpgrade harfbuzz-debuginfo | Mar 12, 2024 | Jun 23, 2022 |
| Suse | — | Upgrade libharfbuzz0-32bitUpgrade harfbuzz-develUpgrade libharfbuzz-gobject0Upgrade libharfbuzz-subset0Upgrade typelib-1_0-harfbuzz-0_0Upgrade harfbuzz-toolsUpgrade libharfbuzz0Upgrade libharfbuzz-subset0-32bitUpgrade libharfbuzz-icu0-32bitUpgrade libharfbuzz-gobject0-32bitUpgrade libharfbuzz-icu0 | Oct 26, 2022 | Jun 23, 2022 |
| Ubuntu | — | Upgrade libharfbuzz0b | Mar 22, 2023 | Jun 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub