CVE-2024-56732

Summary

CVE-2024-56732 is a newly discovered vulnerability affecting HarfBuzz, a widely used text shaping engine. Versions 8.5.0 through 10.0.1 are reportedly vulnerable. This issue involves a heap-based buffer overflow in the function hb_cairo_glyphs_from_buffer, which could allow an attacker to execute arbitrary code or cause a denial-of-service condition when processing maliciously crafted input. The vulnerability poses a significant risk to systems that use HarfBuzz and could lead to serious consequences if exploited. Users are strongly encouraged to update to the latest, non-vulnerable version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.