CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.3%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-25193

Harfbuzz Project » Harfbuzz » Version: N/A

cpe:2.3:a:harfbuzz_project:harfbuzz:-
Harfbuzz Project » Harfbuzz » Version: 0.6.0

cpe:2.3:a:harfbuzz_project:harfbuzz:0.6.0
Harfbuzz Project » Harfbuzz » Version: 0.9.1

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.1
Harfbuzz Project » Harfbuzz » Version: 0.9.10

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.10
Harfbuzz Project » Harfbuzz » Version: 0.9.11

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.11
Harfbuzz Project » Harfbuzz » Version: 0.9.12

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.12
Harfbuzz Project » Harfbuzz » Version: 0.9.13

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.13
Harfbuzz Project » Harfbuzz » Version: 0.9.14

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.14
Harfbuzz Project » Harfbuzz » Version: 0.9.15

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.15
Harfbuzz Project » Harfbuzz » Version: 0.9.16

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.16
Harfbuzz Project » Harfbuzz » Version: 0.9.17

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.17
Harfbuzz Project » Harfbuzz » Version: 0.9.18

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.18
Harfbuzz Project » Harfbuzz » Version: 0.9.19

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.19
Harfbuzz Project » Harfbuzz » Version: 0.9.2

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.2
Harfbuzz Project » Harfbuzz » Version: 0.9.20

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.20
Harfbuzz Project » Harfbuzz » Version: 0.9.21

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.21
Harfbuzz Project » Harfbuzz » Version: 0.9.22

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.22
Harfbuzz Project » Harfbuzz » Version: 0.9.23

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.23
Harfbuzz Project » Harfbuzz » Version: 0.9.24

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.24
Harfbuzz Project » Harfbuzz » Version: 0.9.25

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.25
Harfbuzz Project » Harfbuzz » Version: 0.9.26

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.26
Harfbuzz Project » Harfbuzz » Version: 0.9.27

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.27
Harfbuzz Project » Harfbuzz » Version: 0.9.28

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.28
Harfbuzz Project » Harfbuzz » Version: 0.9.29

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.29
Harfbuzz Project » Harfbuzz » Version: 0.9.3

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.3
Harfbuzz Project » Harfbuzz » Version: 0.9.30

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.30
Harfbuzz Project » Harfbuzz » Version: 0.9.31

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.31
Harfbuzz Project » Harfbuzz » Version: 0.9.32

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.32
Harfbuzz Project » Harfbuzz » Version: 0.9.33

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.33
Harfbuzz Project » Harfbuzz » Version: 0.9.34

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.34
Harfbuzz Project » Harfbuzz » Version: 0.9.35

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.35
Harfbuzz Project » Harfbuzz » Version: 0.9.36

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.36
Harfbuzz Project » Harfbuzz » Version: 0.9.37

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.37
Harfbuzz Project » Harfbuzz » Version: 0.9.38

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.38
Harfbuzz Project » Harfbuzz » Version: 0.9.39

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.39
Harfbuzz Project » Harfbuzz » Version: 0.9.4

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.4
Harfbuzz Project » Harfbuzz » Version: 0.9.40

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.40
Harfbuzz Project » Harfbuzz » Version: 0.9.41

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.41
Harfbuzz Project » Harfbuzz » Version: 0.9.42

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.42
Harfbuzz Project » Harfbuzz » Version: 0.9.5

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.5
Harfbuzz Project » Harfbuzz » Version: 0.9.6

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.6
Harfbuzz Project » Harfbuzz » Version: 0.9.7

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.7
Harfbuzz Project » Harfbuzz » Version: 0.9.8

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.8
Harfbuzz Project » Harfbuzz » Version: 0.9.9

cpe:2.3:a:harfbuzz_project:harfbuzz:0.9.9
Harfbuzz Project » Harfbuzz » Version: 1.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.0
Harfbuzz Project » Harfbuzz » Version: 1.0.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.1
Harfbuzz Project » Harfbuzz » Version: 1.0.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.2
Harfbuzz Project » Harfbuzz » Version: 1.0.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.3
Harfbuzz Project » Harfbuzz » Version: 1.0.4

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.4
Harfbuzz Project » Harfbuzz » Version: 1.0.5

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.5
Harfbuzz Project » Harfbuzz » Version: 1.0.6

cpe:2.3:a:harfbuzz_project:harfbuzz:1.0.6
Harfbuzz Project » Harfbuzz » Version: 1.1.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.1.0
Harfbuzz Project » Harfbuzz » Version: 1.1.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.1.1
Harfbuzz Project » Harfbuzz » Version: 1.1.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.1.2
Harfbuzz Project » Harfbuzz » Version: 1.1.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.1.3
Harfbuzz Project » Harfbuzz » Version: 1.2.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.0
Harfbuzz Project » Harfbuzz » Version: 1.2.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.1
Harfbuzz Project » Harfbuzz » Version: 1.2.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.2
Harfbuzz Project » Harfbuzz » Version: 1.2.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.3
Harfbuzz Project » Harfbuzz » Version: 1.2.4

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.4
Harfbuzz Project » Harfbuzz » Version: 1.2.5

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.5
Harfbuzz Project » Harfbuzz » Version: 1.2.6

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.6
Harfbuzz Project » Harfbuzz » Version: 1.2.7

cpe:2.3:a:harfbuzz_project:harfbuzz:1.2.7
Harfbuzz Project » Harfbuzz » Version: 1.3.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.3.0
Harfbuzz Project » Harfbuzz » Version: 1.3.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.3.1
Harfbuzz Project » Harfbuzz » Version: 1.3.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.3.2
Harfbuzz Project » Harfbuzz » Version: 1.3.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.3.3
Harfbuzz Project » Harfbuzz » Version: 1.3.4

cpe:2.3:a:harfbuzz_project:harfbuzz:1.3.4
Harfbuzz Project » Harfbuzz » Version: 1.4.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.0
Harfbuzz Project » Harfbuzz » Version: 1.4.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.1
Harfbuzz Project » Harfbuzz » Version: 1.4.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.2
Harfbuzz Project » Harfbuzz » Version: 1.4.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.3
Harfbuzz Project » Harfbuzz » Version: 1.4.4

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.4
Harfbuzz Project » Harfbuzz » Version: 1.4.5

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.5
Harfbuzz Project » Harfbuzz » Version: 1.4.6

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.6
Harfbuzz Project » Harfbuzz » Version: 1.4.7

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.7
Harfbuzz Project » Harfbuzz » Version: 1.4.8

cpe:2.3:a:harfbuzz_project:harfbuzz:1.4.8
Harfbuzz Project » Harfbuzz » Version: 1.5.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.5.0
Harfbuzz Project » Harfbuzz » Version: 1.5.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.5.1
Harfbuzz Project » Harfbuzz » Version: 1.6.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.6.0
Harfbuzz Project » Harfbuzz » Version: 1.6.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.6.1
Harfbuzz Project » Harfbuzz » Version: 1.6.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.6.2
Harfbuzz Project » Harfbuzz » Version: 1.6.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.6.3
Harfbuzz Project » Harfbuzz » Version: 1.7.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.0
Harfbuzz Project » Harfbuzz » Version: 1.7.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.1
Harfbuzz Project » Harfbuzz » Version: 1.7.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.2
Harfbuzz Project » Harfbuzz » Version: 1.7.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.3
Harfbuzz Project » Harfbuzz » Version: 1.7.4

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.4
Harfbuzz Project » Harfbuzz » Version: 1.7.5

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.5
Harfbuzz Project » Harfbuzz » Version: 1.7.6

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.6
Harfbuzz Project » Harfbuzz » Version: 1.7.7

cpe:2.3:a:harfbuzz_project:harfbuzz:1.7.7
Harfbuzz Project » Harfbuzz » Version: 1.8.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.0
Harfbuzz Project » Harfbuzz » Version: 1.8.1

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.1
Harfbuzz Project » Harfbuzz » Version: 1.8.2

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.2
Harfbuzz Project » Harfbuzz » Version: 1.8.3

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.3
Harfbuzz Project » Harfbuzz » Version: 1.8.4

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.4
Harfbuzz Project » Harfbuzz » Version: 1.8.5

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.5
Harfbuzz Project » Harfbuzz » Version: 1.8.6

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.6
Harfbuzz Project » Harfbuzz » Version: 1.8.7

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.7
Harfbuzz Project » Harfbuzz » Version: 1.8.8

cpe:2.3:a:harfbuzz_project:harfbuzz:1.8.8
Harfbuzz Project » Harfbuzz » Version: 1.9.0

cpe:2.3:a:harfbuzz_project:harfbuzz:1.9.0
Harfbuzz Project » Harfbuzz » Version: 2.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.0.0
Harfbuzz Project » Harfbuzz » Version: 2.0.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.0.1
Harfbuzz Project » Harfbuzz » Version: 2.0.2

cpe:2.3:a:harfbuzz_project:harfbuzz:2.0.2
Harfbuzz Project » Harfbuzz » Version: 2.1.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.1.0
Harfbuzz Project » Harfbuzz » Version: 2.1.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.1.1
Harfbuzz Project » Harfbuzz » Version: 2.1.2

cpe:2.3:a:harfbuzz_project:harfbuzz:2.1.2
Harfbuzz Project » Harfbuzz » Version: 2.1.3

cpe:2.3:a:harfbuzz_project:harfbuzz:2.1.3
Harfbuzz Project » Harfbuzz » Version: 2.2.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.2.0
Harfbuzz Project » Harfbuzz » Version: 2.3.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.3.0
Harfbuzz Project » Harfbuzz » Version: 2.3.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.3.1
Harfbuzz Project » Harfbuzz » Version: 2.4.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.4.0
Harfbuzz Project » Harfbuzz » Version: 2.5.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.5.0
Harfbuzz Project » Harfbuzz » Version: 2.5.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.5.1
Harfbuzz Project » Harfbuzz » Version: 2.5.2

cpe:2.3:a:harfbuzz_project:harfbuzz:2.5.2
Harfbuzz Project » Harfbuzz » Version: 2.5.3

cpe:2.3:a:harfbuzz_project:harfbuzz:2.5.3
Harfbuzz Project » Harfbuzz » Version: 2.6.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.0
Harfbuzz Project » Harfbuzz » Version: 2.6.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.1
Harfbuzz Project » Harfbuzz » Version: 2.6.2

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.2
Harfbuzz Project » Harfbuzz » Version: 2.6.3

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.3
Harfbuzz Project » Harfbuzz » Version: 2.6.4

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.4
Harfbuzz Project » Harfbuzz » Version: 2.6.5

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.5
Harfbuzz Project » Harfbuzz » Version: 2.6.6

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.6
Harfbuzz Project » Harfbuzz » Version: 2.6.7

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.7
Harfbuzz Project » Harfbuzz » Version: 2.6.8

cpe:2.3:a:harfbuzz_project:harfbuzz:2.6.8
Harfbuzz Project » Harfbuzz » Version: 2.7.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.7.0
Harfbuzz Project » Harfbuzz » Version: 2.7.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.7.1
Harfbuzz Project » Harfbuzz » Version: 2.7.2

cpe:2.3:a:harfbuzz_project:harfbuzz:2.7.2
Harfbuzz Project » Harfbuzz » Version: 2.7.3

cpe:2.3:a:harfbuzz_project:harfbuzz:2.7.3
Harfbuzz Project » Harfbuzz » Version: 2.7.4

cpe:2.3:a:harfbuzz_project:harfbuzz:2.7.4
Harfbuzz Project » Harfbuzz » Version: 2.8.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.8.0
Harfbuzz Project » Harfbuzz » Version: 2.8.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.8.1
Harfbuzz Project » Harfbuzz » Version: 2.8.2

cpe:2.3:a:harfbuzz_project:harfbuzz:2.8.2
Harfbuzz Project » Harfbuzz » Version: 2.9.0

cpe:2.3:a:harfbuzz_project:harfbuzz:2.9.0
Harfbuzz Project » Harfbuzz » Version: 2.9.1

cpe:2.3:a:harfbuzz_project:harfbuzz:2.9.1
Harfbuzz Project » Harfbuzz » Version: 3.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:3.0.0
Harfbuzz Project » Harfbuzz » Version: 3.1.0

cpe:2.3:a:harfbuzz_project:harfbuzz:3.1.0
Harfbuzz Project » Harfbuzz » Version: 3.1.1

cpe:2.3:a:harfbuzz_project:harfbuzz:3.1.1
Harfbuzz Project » Harfbuzz » Version: 3.1.2

cpe:2.3:a:harfbuzz_project:harfbuzz:3.1.2
Harfbuzz Project » Harfbuzz » Version: 3.2.0

cpe:2.3:a:harfbuzz_project:harfbuzz:3.2.0
Harfbuzz Project » Harfbuzz » Version: 3.3.0

cpe:2.3:a:harfbuzz_project:harfbuzz:3.3.0
Harfbuzz Project » Harfbuzz » Version: 3.3.1

cpe:2.3:a:harfbuzz_project:harfbuzz:3.3.1
Harfbuzz Project » Harfbuzz » Version: 3.3.2

cpe:2.3:a:harfbuzz_project:harfbuzz:3.3.2
Harfbuzz Project » Harfbuzz » Version: 3.4.0

cpe:2.3:a:harfbuzz_project:harfbuzz:3.4.0
Harfbuzz Project » Harfbuzz » Version: 4.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:4.0.0
Harfbuzz Project » Harfbuzz » Version: 4.0.1

cpe:2.3:a:harfbuzz_project:harfbuzz:4.0.1
Harfbuzz Project » Harfbuzz » Version: 4.1.0

cpe:2.3:a:harfbuzz_project:harfbuzz:4.1.0
Harfbuzz Project » Harfbuzz » Version: 4.2.0

cpe:2.3:a:harfbuzz_project:harfbuzz:4.2.0
Harfbuzz Project » Harfbuzz » Version: 4.2.1

cpe:2.3:a:harfbuzz_project:harfbuzz:4.2.1
Harfbuzz Project » Harfbuzz » Version: 4.3.0

cpe:2.3:a:harfbuzz_project:harfbuzz:4.3.0
Harfbuzz Project » Harfbuzz » Version: 4.4.0

cpe:2.3:a:harfbuzz_project:harfbuzz:4.4.0
Harfbuzz Project » Harfbuzz » Version: 4.4.1

cpe:2.3:a:harfbuzz_project:harfbuzz:4.4.1
Harfbuzz Project » Harfbuzz » Version: 5.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:5.0.0
Harfbuzz Project » Harfbuzz » Version: 5.0.1

cpe:2.3:a:harfbuzz_project:harfbuzz:5.0.1
Harfbuzz Project » Harfbuzz » Version: 5.1.0

cpe:2.3:a:harfbuzz_project:harfbuzz:5.1.0
Harfbuzz Project » Harfbuzz » Version: 5.2.0

cpe:2.3:a:harfbuzz_project:harfbuzz:5.2.0
Harfbuzz Project » Harfbuzz » Version: 5.3.0

cpe:2.3:a:harfbuzz_project:harfbuzz:5.3.0
Harfbuzz Project » Harfbuzz » Version: 5.3.1

cpe:2.3:a:harfbuzz_project:harfbuzz:5.3.1
Harfbuzz Project » Harfbuzz » Version: 6.0.0

cpe:2.3:a:harfbuzz_project:harfbuzz:6.0.0
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25193

Products

Pricing

Contact Us