An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade harfbuzzUpgrade harfbuzz-icuUpgrade harfbuzz-devel | Nov 18, 2022 | Jun 23, 2022 |
| Alpine Linux | — | Upgrade harfbuzz | Mar 26, 2024 | Jun 22, 2022 |
| Amazon_linux_2023 | — | Upgrade harfbuzz-debuginfoUpgrade harfbuzz-develUpgrade harfbuzz-icuUpgrade harfbuzzUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debugsourceUpgrade harfbuzz-icu-debuginfo | Feb 17, 2025 | Jun 23, 2022 |
| Centos_linux | — | Upgrade harfbuzz-debugsourceUpgrade harfbuzz-icuUpgrade harfbuzzUpgrade harfbuzz-develUpgrade harfbuzz-debuginfoUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-icu-debuginfo | Nov 16, 2022 | Jun 23, 2022 |
| Debian | — | Upgrade harfbuzz | Jul 30, 2024 | Jun 23, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade media-libs/harfbuzz. | Sep 26, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade harfbuzz-helpUpgrade harfbuzzUpgrade harfbuzz-devel | Nov 3, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade harfbuzz-helpUpgrade harfbuzzUpgrade harfbuzz-devel | Sep 14, 2022 | Jun 23, 2022 |
| Oracle_linux | — | Upgrade harfbuzzUpgrade harfbuzz-develUpgrade harfbuzz-icu | Nov 22, 2022 | Jun 23, 2022 |
| Redhat_linux | — | Upgrade harfbuzz-icuUpgrade harfbuzz-debugsourceUpgrade harfbuzz-develUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-debuginfoUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz | Nov 16, 2022 | Jun 23, 2022 |
| Rocky_linux | — | Upgrade harfbuzz-debugsourceUpgrade harfbuzz-develUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-debuginfoUpgrade harfbuzz-icuUpgrade harfbuzzUpgrade harfbuzz-devel-debuginfo | Mar 12, 2024 | Jun 23, 2022 |
| Suse | — | Upgrade libharfbuzz-subset0-32bitUpgrade libharfbuzz-gobject0-32bitUpgrade libharfbuzz-icu0Upgrade libharfbuzz-icu0-32bitUpgrade typelib-1_0-harfbuzz-0_0Upgrade libharfbuzz-subset0Upgrade libharfbuzz0-32bitUpgrade libharfbuzz-gobject0Upgrade libharfbuzz0Upgrade harfbuzz-toolsUpgrade harfbuzz-devel | Oct 26, 2022 | Jun 23, 2022 |
| Ubuntu | — | Upgrade libharfbuzz0b | Mar 22, 2023 | Jun 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub