CVE-2015-9274

HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table…

published November 15, 2018

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01542 · 74.6th percentile
Published
2018-11-15T05:00Z
EPSS history
Timeline
  • 15 NOV 05:00Z
    HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table…
    cvelistv5