Summary
It was discovered that HarfBuzz incorrecty handled certain memory
operations. A remote attacker could use this issue to cause HarfBuzz to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.10 | harfbuzz | 9.0.0-1ubuntu0.1 |
References
-
report
https://ubuntu.com/security/CVE-2024-56732