CVEs-PoC/2015/CVE-2015-8947.md

CVE-2015-8947

Description

hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.

POC

Reference

• https://github.com/behdad/harfbuzz/commit/f96664974774bfeb237a7274f512f64aaafb201e
• https://github.com/behdad/harfbuzz/issues/139#issuecomment-146984679

Github

• https://github.com/ARPSyndicate/cve-scores