Logo
componentharfbuzz
Name
harfbuzz
Version
4.0.1
Type
library
Description
Text shaping library
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:harfbuzz_project:harfbuzz:4.0.1:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
14.2.1
scarthgap
8.3.0

Patches#


#
Title
Author
Resolve
1
[sbix] Fix conditional
Behdad Esfahbod <behdad@behdad.org>
2
[sbix] Limit glyph extents
Behdad Esfahbod <behdad@behdad.org>
3
[GPOS] Avoid O(n^2) behavior in mark-attachment
Behdad Esfahbod <behdad@behdad.org>
CVE-2023-25193
4
[gsubgpos] Refactor skippy_iter.match()
Behdad Esfahbod <behdad@behdad.org>

Vulnerabilities#


Name
Analysis
Description
Patched
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.