Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-56732

HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer

Description

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

harfbuzz harfbuzz

  • >= 8.5.0, <= 10.0.1affected

References