Known Vulnerabilities for products from Harfbuzz Project

Listed below are 3 of the newest known vulnerabilities associated with the vendor "Harfbuzz Project".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2016-2052 Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers ... 7.6 - HIGH 2016-01-25 2023-11-07
CVE-2015-9274 HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) ... 6.5 - MEDIUM 2018-11-15 2018-12-18
CVE-2015-8947 hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) o... 7.6 - HIGH 2016-07-19 2018-01-05

Known software with vulnerabilities from Harfbuzz Project

Type Vendor Product Version
ApplicationHarfbuzz ProjectHarfbuzz0.6.0