p PatchFirst

CVE-2022-33068

CVE-2022-33068

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVSS 5.5 · Medium · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • harfbuzz Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.2.0-2

    Update to 5.2.0-2

  • harfbuzz Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.2.0-2

    Update to 5.2.0-2

  • harfbuzz Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.2.0-2

    Update to 5.2.0-2

  • openjdk-9 Ubuntu:16.04:LTS

    Versions
    • 9~b88-1
    • 9~b101-2ubuntu2
    • 9~b102-1
    • 9~b113-0ubuntu1
    • 9~b114-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • harfbuzz Ubuntu:20.04:LTS

    Versions
    • 2.6.1-3
    • 2.6.2-1
    • 2.6.4-1
    • 2.6.4-1ubuntu1
    • 2.6.4-1ubuntu2
    • 2.6.4-1ubuntu3
    • 2.6.4-1ubuntu4
    Affected ranges
    • ECOSYSTEM: < 2.6.4-1ubuntu4.2

    Update to 2.6.4-1ubuntu4.2

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • harfbuzz Ubuntu:22.04:LTS

    Versions
    • 2.7.4-1ubuntu1
    • 2.7.4-1ubuntu2
    • 2.7.4-1ubuntu3
    Affected ranges
    • ECOSYSTEM: < 2.7.4-1ubuntu3.1

    Update to 2.7.4-1ubuntu3.1

  • qt6-base Ubuntu:22.04:LTS

    Versions
    • 6.2.2+dfsg-5ubuntu1
    • 6.2.2+dfsg-6ubuntu1
    • 6.2.2+dfsg-6ubuntu2
    • 6.2.4+dfsg-1ubuntu1
    • 6.2.4+dfsg-2ubuntu1
    • 6.2.4+dfsg-2ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.6+dfsg-1
    • 5.15.6+dfsg-2
    • 5.15.7+dfsg-2
    • 5.15.8+dfsg-1
    • 5.15.8+dfsg-1build1
    • 5.15.8+dfsg-1build2
    • 5.15.8+dfsg-2
    • 5.15.9+dfsg-1
    • 5.15.9+dfsg-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:24.04:LTS

    Versions
    • 6.4.2+dfsg-18
    • 6.4.2+dfsg-19
    • 6.4.2+dfsg-19build1
    • 6.4.2+dfsg-20
    • 6.4.2+dfsg-21
    • 6.4.2+dfsg-21.1build4
    • 6.4.2+dfsg-21.1build5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:24.04:LTS

    Versions
    • 5.15.15+dfsg-2
    • 5.15.15+dfsg-2build2
    • 5.15.15+dfsg-2ubuntu1
    • 5.15.16+dfsg-1
    • 5.15.16+dfsg-1ubuntu2
    • 5.15.16+dfsg-1ubuntu4
    • 5.15.16+dfsg-3
    • 5.15.16+dfsg-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:25.10

    Versions
    • 6.8.3+dfsg-0ubuntu2
    • 6.8.3+dfsg-0ubuntu3
    • 6.9.2+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:25.10

    Versions
    • 5.15.18+dfsg-2
    • 5.15.18+dfsg-2build1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:26.10

    Versions
    • 6.10.2+dfsg-7
    • 6.10.2+dfsg-14ubuntu2
    • 6.10.2+dfsg-15
    • 6.10.2+dfsg-16
    • 6.11.2+dfsg-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:26.10

    Versions
    • 5.15.19+dfsg2-4
    • 5.15.19+dfsg2-6
    • 5.15.19+dfsg2-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:26.04:LTS

    Versions
    • 6.9.2+dfsg-1ubuntu1
    • 6.9.2+dfsg-2
    • 6.9.2+dfsg-3ubuntu1
    • 6.9.2+dfsg-3ubuntu2
    • 6.9.2+dfsg-4
    • 6.10.2+dfsg-3
    • 6.10.2+dfsg-6
    • 6.10.2+dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:26.04:LTS

    Versions
    • 5.15.19+dfsg2-1
    • 5.15.19+dfsg2-1build1
    • 5.15.19+dfsg2-2
    • 5.15.19+dfsg2-3
    • 5.15.19+dfsg2-4
    • 5.15.19+dfsg2-4ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →