CVE-2023-25193

Name of the Vulnerable Software and Affected Versions HarfBuzz versions through 6.0.0

Description The issue in HarfBuzz is related to the hb-ot-layout-gsubgpos.hh component, which allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. This can lead to a denial of service. The vulnerability is associated with uncontrolled resource allocation.

Recommendations For HarfBuzz versions through 6.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.