JLSEC-2025-175 hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via...

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

EUVD-2015-8803

Malware in sbrugna...

EUVD-2015-9116

Malware in sbrugna...

EUVD-2011-3157

Malware in sbrugna...

EUVD-2011-0090

Malware in sbrugna...

EUVD-2016-3157

Malware in sbrugna...

EUVD-2021-32640

Malicious code in bioql PyPI...

EUVD-2024-53379

Malicious code in bioql PyPI...

EUVD-2023-29157

Malicious code in bioql PyPI...

EUVD-2022-36125

Malicious code in bioql PyPI...

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

...

Linux Distros Unpatched Vulnerability : CVE-2024-56732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

CLSA-2025-1753730595 java-17-openjdk: Fix of 25 CVEs

Update to jdk-17.0.15+6 - Set bundled freetype provide version to 2.13.2 - Set bundled harfbuzz provide version to 8.2.2 - Require tzdata-java 2025a at runtime and for build - CVE-2025-21502: fix Hotspot component vulnerability allowing unauthorized access to resources and exposure of sensitive...

PT-2025-31561 · Git · Harfbuzz

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2 cs opset tcff2 cs opset subr subset t, CFF::subr subset param t, CFF: cff2 cs opset subr subset t::process op CFF::subr subsetter tcff2 subr subsetter t,...

TencentOS Server 3: harfbuzz (TSSA-2024:0183)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0183 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2024-56732

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

Alibaba Cloud Linux 3 : 0147: harfbuzz (ALINUX3-SA-2023:0147)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0147 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-33068: An integer overflow in the componen...

Alibaba Cloud Linux 3 : 0135: harfbuzz (ALINUX3-SA-2024:0135)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0135 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuz...

harfbuzz security update

An update is available for harfbuzz. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HarfBuzz is an implementation of the OpenType Layout engine. Security Fixes:...

RLSA-2024:2410 Moderate: harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fixes: harfbuzz: allows attackers to trigger On^2 growth via consecutive marks CVE-2023-25193 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer...