An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade harfbuzz-develUpgrade harfbuzz-icuUpgrade harfbuzz | Nov 18, 2022 | Jun 23, 2022 |
| Alpine Linux | — | Upgrade harfbuzz | Mar 26, 2024 | Jun 22, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-harfbuzzamazon-linux-2023-upgrade-harfbuzz-debuginfoamazon-linux-2023-upgrade-harfbuzz-debugsourceamazon-linux-2023-upgrade-harfbuzz-develamazon-linux-2023-upgrade-harfbuzz-devel-debuginfoamazon-linux-2023-upgrade-harfbuzz-icuamazon-linux-2023-upgrade-harfbuzz-icu-debuginfo | Feb 17, 2025 | Jun 23, 2022 | |
| Centos_linux | — | Upgrade harfbuzz-icuUpgrade harfbuzz-debugsourceUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-develUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debuginfoUpgrade harfbuzz | Nov 16, 2022 | Jun 23, 2022 |
| Debian | — | Upgrade harfbuzz | Jul 30, 2024 | Jun 23, 2022 |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | — | Upgrade media-libs/harfbuzz. | Sep 26, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-help | Nov 3, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-help | Sep 14, 2022 | Jun 23, 2022 |
| Oracle_linux | — | oracle-linux-upgrade-harfbuzzoracle-linux-upgrade-harfbuzz-develoracle-linux-upgrade-harfbuzz-icu | Nov 22, 2022 | Jun 23, 2022 |
| Redhat_linux | — | Upgrade harfbuzz-devel-debuginfoUpgrade harfbuzzUpgrade harfbuzz-debuginfoUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-icuUpgrade harfbuzz-develUpgrade harfbuzz-debugsource | Nov 16, 2022 | Jun 23, 2022 |
| Rocky_linux | rocky-upgrade-harfbuzzrocky-upgrade-harfbuzz-debuginforocky-upgrade-harfbuzz-debugsourcerocky-upgrade-harfbuzz-develrocky-upgrade-harfbuzz-devel-debuginforocky-upgrade-harfbuzz-icurocky-upgrade-harfbuzz-icu-debuginfo | Mar 12, 2024 | Jun 23, 2022 | |
| Suse | — | suse-upgrade-harfbuzz-develsuse-upgrade-harfbuzz-toolssuse-upgrade-libharfbuzz-gobject0suse-upgrade-libharfbuzz-gobject0-32bitsuse-upgrade-libharfbuzz-icu0suse-upgrade-libharfbuzz-icu0-32bitsuse-upgrade-libharfbuzz-subset0suse-upgrade-libharfbuzz-subset0-32bitsuse-upgrade-libharfbuzz0suse-upgrade-libharfbuzz0-32bitsuse-upgrade-typelib-1_0-harfbuzz-0_0 | Oct 26, 2022 | Jun 23, 2022 |
| Ubuntu | ubuntu-upgrade-libharfbuzz0b | Mar 22, 2023 | Jun 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub