CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

References

Affected packages

Debian:11 / harfbuzz

Package

Name: harfbuzz
Purl: pkg:deb/debian/harfbuzz?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.7.4-1

5.*

5.1.0-1

5.2.0-1

5.2.0-2

5.3.1-1

5.3.1-2

6.*

6.0.0-1

6.0.0+dfsg-1

6.0.0+dfsg-2

6.0.0+dfsg-3

8.*

8.0.0-1

8.0.0-2

8.0.0-3

8.0.1-1

8.3.0-1

8.3.0-2

9.*

9.0.0-1

10.*

10.0.1-1

10.1.0-1

10.1.0-2

10.2.0-1

10.2.0-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / harfbuzz

Package

Name: harfbuzz
Purl: pkg:deb/debian/harfbuzz?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.0+dfsg-3

8.*

8.0.0-1

8.0.0-2

8.0.0-3

8.0.1-1

8.3.0-1

8.3.0-2

9.*

9.0.0-1

10.*

10.0.1-1

10.1.0-1

10.1.0-2

10.2.0-1

10.2.0-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / harfbuzz

Package

Name: harfbuzz
Purl: pkg:deb/debian/harfbuzz?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.0-1

Affected versions

6.*

6.0.0+dfsg-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/behdad/harfbuzz

Affected ranges

Type: GIT
Repo: https://github.com/behdad/harfbuzz
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

afcae83a064843d71d47624bc162e121cc56c08b

Type: GIT
Repo: https://github.com/harfbuzz/harfbuzz
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

85be877925ddbf34f74a1229f3ca1716bb6170dc

Affected versions

0.*

0.6.0

0.9.1

0.9.10

0.9.11

0.9.12

0.9.13

0.9.14

0.9.15

0.9.16

0.9.17

0.9.18

0.9.19

0.9.2

0.9.20

0.9.21

0.9.22

0.9.23

0.9.24

0.9.25

0.9.26

0.9.27

0.9.28

0.9.29

0.9.3

0.9.30

0.9.31

0.9.32

0.9.33

0.9.34

0.9.35

0.9.36

0.9.37

0.9.38

0.9.39

0.9.4

0.9.40

0.9.41

0.9.42

0.9.5

0.9.6

0.9.7

0.9.8

0.9.9

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.1.0

1.1.1

1.1.2

1.1.3

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

1.4.0

1.4.1

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.5.0

1.5.1

1.6.0

1.6.1

1.6.2

1.6.3

1.7.0

1.7.1

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.8.0

1.8.1

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.9.0

2.*

2.0.0

2.0.1

2.0.2

2.1.0

2.1.1

2.1.2

2.1.3

2.2.0

2.3.0

2.3.1

2.4.0

2.5.0

2.5.1

2.5.2

2.5.3

2.6.0

2.6.1

2.6.2

2.6.3

2.6.4

2.6.5

2.6.6

2.6.7

2.6.8

2.7.0

2.7.1

2.7.2

2.7.3

2.7.4

2.8.0

2.8.1

2.8.2

2.9.0

2.9.1

3.*

3.0.0

3.1.0

3.1.1

3.1.2

3.2.0

3.3.0

3.3.1

3.3.2

3.4.0

4.*

4.0.0

4.0.1

4.1.0

4.2.0

4.2.1

4.3.0

4.4.0

4.4.1

5.*

5.0.0

5.0.1

5.1.0

5.2.0

5.3.0

5.3.1

6.*

6.0.0

Other

hb-rename

ng-mergepoint

ng-start

pango-extractpoint

pango-start