Vulnerabilities (CVE)

Filtered by vendor Harfbuzz Project Subscribe
Filtered by product Harfbuzz
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-8947 1 Harfbuzz Project 1 Harfbuzz 2018-01-05 7.5 HIGH 7.6 HIGH
hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
CVE-2016-2052 2 Google, Harfbuzz Project 2 Chrome, Harfbuzz 2017-07-01 6.8 MEDIUM 7.6 HIGH
Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.