0.001 Low
EPSS
Percentile
49.7%
harfbuzz is vulnerable to denial of service. Mishandling of GPOS and GSUB table in hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh and hb-ot-layout-gsubgpos-private.hh allows an attacker to cause a denial of service condition.
hb-ot-layout-gpos-table.hh
hb-ot-layout-gsub-table.hh
hb-ot-layout-gsubgpos-private.hh
github.com/harfbuzz/harfbuzz/commit/c917965b9e6fe2b21ed6c51559673288fa3af4b7