CVE-2016-2052
NONE EPSS 57.0%
Published Jan 25, 201610y ago · Modified Jun 17, 20262w ago
Published Jan 25, 2016 10y ago
Last Modified Jun 17, 2026 2w ago
Description
Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.
Threat Intelligence
EPSS Exploit Probability
57.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Affected Products 2
| Vendor | Product | Version | Range |
|---|---|---|---|
| harfbuzz_project | harfbuzz | * | ≤1.0.5 |
| chrome | * | ≤47.0.2526.106 |
References 12
- googlechromereleases.blogspot.com http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2016-08/msg00070.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0072.html
- securityfocus.com http://www.securityfocus.com/bid/81812
- securitytracker.com http://www.securitytracker.com/id/1034801
- ubuntu.com http://www.ubuntu.com/usn/USN-2877-1
- ubuntu.com http://www.ubuntu.com/usn/USN-3067-1
- code.google.com https://code.google.com/p/chromium/issues/detail?id=544270
- code.google.com https://code.google.com/p/chromium/issues/detail?id=579625
- github.com https://github.com/behdad/harfbuzz/commit/63ef0b41dc48d6112d1918c1b1de9de8ea90adb5
- github.com https://github.com/behdad/harfbuzz/issues/139#issuecomment-148289957
- security.gentoo.org https://security.gentoo.org/glsa/201701-76
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.