REDHAT-BUG-2102608: Integer Overflow

Published Jun 30, 2022

Updated

An integer overflow in the component hb-ot-shape-fallback.cc allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Reference:

https://github.com/harfbuzz/harfbuzz/issues/3557 https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593

Affected Software

1 affected component

HarfBuzz HarfBuzz

Event History

Jun 30, 2022

Data Sourced

via Red Hat·10:58 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the expected impact if this flaw is exploited?

The reported impact is denial of service. The issue is an integer overflow in hb-ot-shape-fallback.cc.

Are the attack vectors or required attacker privileges known?

No. The available information describes the vectors as unspecified and does not state whether authentication, local access, or user interaction is required.

How can I determine whether my installation is affected?

The provided data identifies HarfBuzz as the affected software but does not include affected or fixed version ranges. Review the vendor bug reference and the upstream fix commit to map your installed package version to the remediation status.

REDHAT-BUG-2102608: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

What is the expected impact if this flaw is exploited?

Are the attack vectors or required attacker privileges known?

How can I determine whether my installation is affected?

Company

Resources

Contact

Frequently Asked Questions

What is the expected impact if this flaw is exploited?

Are the attack vectors or required attacker privileges known?

How can I determine whether my installation is affected?