https://bugzilla.redhat.com/show_bug.cgi?id=2102608
Bug ID: 2102608
Summary: CVE-2022-33068 VUL-0: CVE-2022-33068: harfbuzz:
integer overflow in the component
hb-ot-shape-fallback.cc
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: caswilli(a)redhat.com, dffrench(a)redhat.com,
eng-i18n-bugs(a)redhat.com, erik-fedora(a)vanpienbroek.nl,
gzaronik(a)redhat.com,
i18n-bugs(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jwong(a)redhat.com,
kaycoth(a)redhat.com, klember(a)redhat.com,
kshier(a)redhat.com, manisandro(a)gmail.com,
moceap(a)hotmail.com, ngough(a)redhat.com,
pnemade(a)redhat.com, psatpute(a)redhat.com,
rgodfrey(a)redhat.com, rh-spice-bugs(a)redhat.com,
tuxator(a)o2.pl
Target Milestone: ---
Classification: Other
An integer overflow in the component hb-ot-shape-fallback.cc allows attackers
to cause a Denial of Service (DoS) via unspecified vectors.
Reference:
https://github.com/harfbuzz/harfbuzz/issues/3557
https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2102608