Lucene search
+L

860 matches found

GitLab Advisory Database
GitLab Advisory Database
•added 2022/06/23 12:00 a.m.•31 views

Integer Overflow or Wraparound

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

5.5CVSS5.9AI score0.01189EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2022/06/23 12:00 a.m.•9 views

HarfBuzz 输入验证错误漏洞

HarfBuzz is a text engine for OpenType fonts. HarfBuzz v4.3.0 is vulnerable to a denial of service vulnerability caused by an integer overflow in the hb-ot-shape-fallback.cc component, which can be exploited to cause a denial of service DoS via an unspecified vector...

5.5CVSS5.7AI score0.01189EPSS
SaveExploits1References12
osv_cve
osv_cve
•added 2022/06/22 1:24 p.m.•31 views

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

5.8AI score
SaveExploits0References8
Mend
Mend
•added 2022/06/22 1:24 p.m.•5 views

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

6.8CVSS0.01189EPSS
SaveExploits1References14
AlpineLinux
AlpineLinux
•added 2022/06/22 1:24 p.m.•44 views

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

5.5CVSS5.8AI score0.01189EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/06/22 1:24 p.m.•31 views

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

5.8AI score0.01189EPSS
SaveExploits1References6
CVE
CVE
•added 2022/06/22 1:24 p.m.•204 views

CVE-2022-33068

CVE-2022-33068 : HarfBuzz v4.3.0 contains an integer overflow in the hb-ot-shape-fallback.cc component that can lead to a Denial of Service via unspecified vectors. Documents corroborate the issue across multiple advisories (Linux distros and CNVD), noting a security fix is required, but do not p...

5.5CVSS5.4AI score0.01189EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2022/06/22 1:24 p.m.•44 views

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

5.5CVSS5.9AI score0.01189EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/22 12:00 a.m.•3 views

CVE-2022-33068: Integer Overflow or Wraparound

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

5.5CVSS6.3AI score0.01189EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/22 12:00 a.m.•3 views

PT-2022-4310

Name of the Vulnerable Software and Affected Versions Harfbuzz version 4.3.0 Description The issue is related to an integer overflow in the hb-ot-shape-fallback.cc component of the Harfbuzz library, which can be exploited by attackers to cause a Denial of Service DoS via unspecified vectors. This...

7.8CVSS0.01189EPSS
SaveExploits1References53
OSS-Fuzz
OSS-Fuzz
•added 2022/06/06 7:36 p.m.•15 views

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in OT::postV2Tail::subset

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5693568490012672 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/06/02 6:53 p.m.•7 views

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6532087538122752 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

5.9AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2022/05/17 8:05 a.m.•20 views

new packages: harfbuzz

An update is available for harfbuzz. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

1.5AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/05/06 4:05 p.m.•14 views

harfbuzz:hb-subset-fuzzer: Crash in OT::gvar::subset

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5508865908670464 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62800002128c...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/02/01 6:02 a.m.•10 views

harfbuzz:hb-subset-fuzzer: Heap-use-after-free in hb_bit_set_invertible_t::next

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5751353601818624 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x618000146f...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/02/01 2:57 a.m.•6 views

harfbuzz:hb-subset-fuzzer: Heap-use-after-free in OT::CoverageFormat1::intersected_coverage_glyphs

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4900676877025280 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/01/30 12:03 p.m.•8 views

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in void apply_string<GSUBProxy>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6429100917522432 Project: harfbuzz Fuzzing Engine: honggfuzz Fuzz Target: hb-shape-fuzzer Job Type: honggfuzzasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/01/29 9:18 p.m.•9 views

harfbuzz:hb-subset-fuzzer: Heap-use-after-free in hb_bit_set_invertible_t::intersects

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5422577634377728 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

5.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•29 views

Mageia: Security Advisory (MGASA-2016-0264)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6CVSS7.7AI score0.02551EPSS
SaveExploits0References5
Fedora
Fedora
•added 2022/01/22 1:32 a.m.•37 views

[SECURITY] Fedora 35 Update: harfbuzz-2.9.1-1.fc35

HarfBuzz is an implementation of the OpenType Layout engine...

6.5CVSS1.8AI score0.0178EPSS
SaveExploits1
Rows per page
Query Builder