An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-icu | Nov 18, 2022 | Jun 23, 2022 |
| Alpine Linux | — | Upgrade harfbuzz | Mar 26, 2024 | Jun 22, 2022 |
| Amazon_linux_2023 | — | Upgrade harfbuzz-icuUpgrade harfbuzz-debuginfoUpgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debugsourceUpgrade harfbuzz-icu-debuginfo | Feb 17, 2025 | Jun 23, 2022 |
| Centos_linux | — | Upgrade harfbuzz-icuUpgrade harfbuzz-debugsourceUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-debuginfoUpgrade harfbuzzUpgrade harfbuzz-develUpgrade harfbuzz-icu-debuginfo | Nov 16, 2022 | Jun 23, 2022 |
| Debian | — | Upgrade harfbuzz | Jul 30, 2024 | Jun 23, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade media-libs/harfbuzz. | Sep 26, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-help | Nov 3, 2022 | Jun 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade harfbuzzUpgrade harfbuzz-helpUpgrade harfbuzz-devel | Sep 14, 2022 | Jun 23, 2022 |
| Oracle_linux | — | Upgrade harfbuzzUpgrade harfbuzz-develUpgrade harfbuzz-icu | Nov 22, 2022 | Jun 23, 2022 |
| Redhat_linux | — | Upgrade harfbuzzUpgrade harfbuzz-devel-debuginfoUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-icuUpgrade harfbuzz-debuginfoUpgrade harfbuzz-develUpgrade harfbuzz-debugsource | Nov 16, 2022 | Jun 23, 2022 |
| Rocky_linux | — | Upgrade harfbuzz-debugsourceUpgrade harfbuzz-debuginfoUpgrade harfbuzz-icu-debuginfoUpgrade harfbuzz-develUpgrade harfbuzzUpgrade harfbuzz-icuUpgrade harfbuzz-devel-debuginfo | Mar 12, 2024 | Jun 23, 2022 |
| Suse | — | Upgrade harfbuzz-develUpgrade harfbuzz-toolsUpgrade typelib-1_0-harfbuzz-0_0Upgrade libharfbuzz0Upgrade libharfbuzz-subset0Upgrade libharfbuzz-gobject0Upgrade libharfbuzz0-32bitUpgrade libharfbuzz-gobject0-32bitUpgrade libharfbuzz-icu0Upgrade libharfbuzz-icu0-32bitUpgrade libharfbuzz-subset0-32bit | Oct 26, 2022 | Jun 23, 2022 |
| Ubuntu | — | Upgrade libharfbuzz0b | Mar 22, 2023 | Jun 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub