CVE-2016-2052

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "google:chrome",
            "extracted_events": [
                {
                    "last_affected": "47.0.2526.106"
                }
            ]
        }
    ]
}

References

CVE-2016-2052

Affected packages