Summary
It was discovered that HarfBuzz incorrectly handled certain glyph sizes. A
remote attacker could use this issue to cause HarfBuzz to crash, resulting
in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | harfbuzz | 2.6.4-1ubuntu4.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | harfbuzz | 2.7.4-1ubuntu3.1 |
Vulnerabilities 1
-
Unscored —
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of S…
References
-
report
https://ubuntu.com/security/CVE-2022-33068