Known vulnerabilities in harfbuzz (Red Hat package)

Vendor: Red Hat Inc.
Software: harfbuzz (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:harfbuzz_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting harfbuzz (Red Hat package) harfbuzz (Red Hat package) is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72050 - Improper input validation
CVE-2023-25193		 CWE-20 Medium
No
No
 1.7.5-4.el8, 2.7.4-10.el9 08.02.2023 SB2023020843
SB2023041464
SB2023060525
and 80 more
#VU65442 - Integer overflow
CVE-2022-33068		 CWE-190 Medium
No
No
 2.7.4-8.el9 19.07.2022 SB2022071913
SB2022071915
SB2022080431
and 15 more
#VU40344 - Heap-based Buffer Overflow
CVE-2015-7552		 CWE-122 Medium
No
No
 1.3.2-1.el7 18.04.2016 SB2016041804
SB2017080118