CVE-2015-8947

High

Published: 19/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HarfBuzz before version 1.0.5 contains a vulnerability that allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting the availability of services relying on HarfBuzz.

Recommendation

It is recommended to update HarfBuzz to version 1.0.5 or later to mitigate this vulnerability.

Other vulnerabilities in HarfBuzz

CVE-2024-56732High
HarfBuzz is a text shaping engine. Starting with versions 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function.

Original NVD description (English source)

hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.