CVE-2011-0064

The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations…

published March 7, 2011

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03333 · 88.5th percentile
Published
2011-03-07T20:00Z
EPSS history
Timeline
  • 07 MAR 20:00Z
    The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations…
    cvelistv5