Integer Overflow in Harfbuzz Affects Multiple Platforms
CVE-2022-33068

5.5MEDIUM

Key Information:

Vendor: Harfbuzz Project
Status: Harfbuzz
Vendor: CVE Published:; 23 June 2022

🔔 Create Harfbuzz Project Vulnerability Alert

What is CVE-2022-33068?

An integer overflow issue in the hb-ot-shape-fallback.cc component of Harfbuzz v4.3.0 can be exploited by attackers to trigger a Denial of Service (DoS). This vulnerability can be leveraged through unspecified vectors, compromising the stability and availability of systems using the software. Understanding the methods of attack and implementing proper security measures is essential for organizations utilizing Harfbuzz in their operations, particularly in environments where reliability is crucial.