CVE-2024-56732

概要

参考情報

• harfbuzz/harfbuzz commit 1767f99 · Patch
• harfbuzz/harfbuzz security advisory · Exploit

harfbuzz のその他の脆弱性

• CVE-2026-22693中 5.3HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::cr…
• CVE-2023-25193高 7.5hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of loo…
• CVE-2022-33068中 5.5An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unsp…
• CVE-2021-45931中 6.5HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_s…
• CVE-2015-9274中 6.5HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS…