Msrc Cm1 Harfbuzz 3.4.0-1 On Cbl Mariner 1.0 vulnerabilities

1 known vulnerability affecting msrc/cm1_harfbuzz_3.4.0-1_on_cbl_mariner_1.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-25193HIGHCVSS 7.52023-02-14

CVE-2023-25193 [HIGH] CWE-770 hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is