Harfbuzz Project vulnerabilities
We track 1 vulnerability in Harfbuzz Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Harfbuzz Project vulnerabilities
- 7.5 High severity
Harfbuzz: Allocation of Resources Without Limits or Throttling
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.