Heap-based Buffer Overflow in HarfBuzz Text Shaping Engine
CVE-2024-56732
Currently unrated
What is CVE-2024-56732?
The vulnerability in the HarfBuzz text shaping engine, found in versions 8.5.0 through 10.0.1, is a heap-based buffer overflow that occurs in the hb_cairo_glyphs_from_buffer function. This flaw may be exploited in scenarios where user-controlled data is processed, potentially allowing an attacker to execute arbitrary code or cause a denial of service. Users of the affected versions are urged to update to newer releases that contain patches addressing this issue.