CVE-2024-56732

CVE-2024-56732 affects HarfBuzz 8.5.0–10.0.1 with a heap-based buffer overflow in hb_cairo_glyphs_from_buffer. Multiple Nessus/Amazon/Linux advisories corroborate the issue across distributions. No explicit exploit details or fixed version are provided in the connected docs; remediation requires ...

CVE-2024-56732 HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

CVE-2024-56732 HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

CVE-2024-56732

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

CVE-2024-56732

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

CVE-2024-56732 HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

PT-2024-37045

Name of the Vulnerable Software and Affected Versions HarfBuzz versions 8.5.0 through 10.0.1 Description HarfBuzz is a text shaping engine. There is a heap-based buffer overflow in the hb cairo glyphs from buffer function. This issue may allow a remote attacker to execute arbitrary code on the...

HarfBuzz 安全漏洞

HarfBuzz is a text engine for OpenType fonts from the HarfBuzz open source. A security vulnerability exists in HarfBuzz versions 8.5.0 through 10.0.1, which stems from a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

Amazon Linux 2022 : harfbuzz, harfbuzz-devel, harfbuzz-icu (ALAS2022-2022-027)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-027 advisory. HarfBuzz 2.9.0 has an out-of-bounds write in hbbitsetinvertiblet::set called from hbsparsesett::set and hbsetcopy. CVE-2021-45931 Tenable has extracted the preceding description block directly from the...

SUSE SLED15: libreoffice / libreoffice-base / libreoffice-base-drivers-firebird / etc (SUSE-SU-2024:3577-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3577-1 advisory. libreoffice was updated to version 24.8.1.2 jscPED-10362: - Release notes:...

SUSE-SU-2024:3577-1 Security update for libreoffice

This update for libreofficefixes the following issues: libreoffice was updated to version 24.8.1.2 jscPED-10362: - Release notes: https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and...

SUSE-SU-2024:3576-1 Security update for libreoffice

This update for libreoffice fixes the following issues: libreoffice was updated to version 24.8.1.2 jscPED-10362: - Release notes: https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and...

Security update for libreoffice

This update for libreoffice fixes the following issues: libreoffice was updated to version 24.8.1.2 jscPED-10362: Release notes: https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and...

RHSA-2024:2980 Red Hat Security Advisory: harfbuzz security update

Bulletin has no description...

RHSA-2024:2410 Red Hat Security Advisory: harfbuzz security update

Bulletin has no description...

RHSA-2022:8384 Red Hat Security Advisory: harfbuzz security update

Bulletin has no description...

Huawei EulerOS: Security Advisory for harfbuzz (EulerOS-SA-2024-2269)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2024-1723795896 harfbuzz: Fix of CVE-2023-25193

CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hh...

Photon OS 3.0: Harfbuzz PHSA-2023-3.0-0538

An update of the harfbuzz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Harfbuzz PHSA-2023-4.0-0339

An update of the harfbuzz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0339. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...