PT-2023-5503

Name of the Vulnerable Software and Affected Versions HarfBuzz versions through 6.0.0 Description The issue in HarfBuzz is related to the hb-ot-layout-gsubgpos.hh component, which allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when...