CVE-2016-2052 - CVE House
Back to Database
Status published High CVE-2016-2052

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in...

Vulnerability Description

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-2052

Credits & Attribution

No credits recorded in the NVD database.

References

More from harfbuzz project

View All →
CVE-2022-33068
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0...
Medium 5.5
CVE-2021-45931
HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from...
Medium 6.5
CVE-2015-9274
HarfBuzz before 1.0.4 allows remote attackers to cause a denial...
Medium 6.5
CVE-2015-8947
hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause...
High 7.6

Affected Vendor

harfbuzz project

View all reports →

Affected Software

harfbuzz, chrome
Vulnerable Versions:
0

Timeline

Official Publish: January 25th, 2016
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.