CVE-2015-9274

概要

参考情報

• harfbuzz/harfbuzz commit c917965 · Patch

harfbuzz のその他の脆弱性

• CVE-2026-22693中 5.3HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::cr…
• CVE-2024-56732高 8.8HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buf…
• CVE-2023-25193高 7.5hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of loo…
• CVE-2022-33068中 5.5An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unsp…
• CVE-2021-45931中 6.5HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_s…