CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9274

HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 76.6%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2015-9274

Harfbuzz Project » Harfbuzz » Version: N/A

cpe:2.3:a:harfbuzz_project:harfbuzz:-
Harfbuzz Project » Harfbuzz » Version: 0.6.0

cpe:2.3:a:harfbuzz_project:harfbuzz:0.6.0
Harfbuzz Project » Harfbuzz » Version: 0.9.1

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.1
Harfbuzz Project » Harfbuzz » Version: 0.9.10

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.10
Harfbuzz Project » Harfbuzz » Version: 0.9.11

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.11
Harfbuzz Project » Harfbuzz » Version: 0.9.12

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.12
Harfbuzz Project » Harfbuzz » Version: 0.9.13

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.13
Harfbuzz Project » Harfbuzz » Version: 0.9.14

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.14
Harfbuzz Project » Harfbuzz » Version: 0.9.15

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.15
Harfbuzz Project » Harfbuzz » Version: 0.9.16

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.16
Harfbuzz Project » Harfbuzz » Version: 0.9.17

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.17
Harfbuzz Project » Harfbuzz » Version: 0.9.18

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.18
Harfbuzz Project » Harfbuzz » Version: 0.9.19

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.19
Harfbuzz Project » Harfbuzz » Version: 0.9.2

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.2
Harfbuzz Project » Harfbuzz » Version: 0.9.20

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.20
Harfbuzz Project » Harfbuzz » Version: 0.9.21

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.21
Harfbuzz Project » Harfbuzz » Version: 0.9.22

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.22
Harfbuzz Project » Harfbuzz » Version: 0.9.23

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.23
Harfbuzz Project » Harfbuzz » Version: 0.9.24

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.24
Harfbuzz Project » Harfbuzz » Version: 0.9.25

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.25
Harfbuzz Project » Harfbuzz » Version: 0.9.26

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.26
Harfbuzz Project » Harfbuzz » Version: 0.9.27

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.27
Harfbuzz Project » Harfbuzz » Version: 0.9.28

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.28
Harfbuzz Project » Harfbuzz » Version: 0.9.29

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.29
Harfbuzz Project » Harfbuzz » Version: 0.9.3

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.3
Harfbuzz Project » Harfbuzz » Version: 0.9.30

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.30
Harfbuzz Project » Harfbuzz » Version: 0.9.31

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.31
Harfbuzz Project » Harfbuzz » Version: 0.9.32

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.32
Harfbuzz Project » Harfbuzz » Version: 0.9.33

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.33
Harfbuzz Project » Harfbuzz » Version: 0.9.34

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.34
Harfbuzz Project » Harfbuzz » Version: 0.9.35

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.35
Harfbuzz Project » Harfbuzz » Version: 0.9.36

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.36
Harfbuzz Project » Harfbuzz » Version: 0.9.37

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.37
Harfbuzz Project » Harfbuzz » Version: 0.9.38

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.38
Harfbuzz Project » Harfbuzz » Version: 0.9.39

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.39
Harfbuzz Project » Harfbuzz » Version: 0.9.4

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.4
Harfbuzz Project » Harfbuzz » Version: 0.9.40

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.40
Harfbuzz Project » Harfbuzz » Version: 0.9.41

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.41
Harfbuzz Project » Harfbuzz » Version: 0.9.42

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.42
Harfbuzz Project » Harfbuzz » Version: 0.9.5

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.5
Harfbuzz Project » Harfbuzz » Version: 0.9.6

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.6
Harfbuzz Project » Harfbuzz » Version: 0.9.7

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.7
Harfbuzz Project » Harfbuzz » Version: 0.9.8

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.8
Harfbuzz Project » Harfbuzz » Version: 0.9.9

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.9
Harfbuzz Project » Harfbuzz » Version: 1.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.0
Harfbuzz Project » Harfbuzz » Version: 1.0.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.1
Harfbuzz Project » Harfbuzz » Version: 1.0.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.2
Harfbuzz Project » Harfbuzz » Version: 1.0.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9274

Products

Pricing

Contact Us