{"id":"CVE-2022-33068","details":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","modified":"2026-08-12T13:32:55.907860Z","published":"2022-06-22T13:24:42Z","related":["ALSA-2022:8384","SUSE-SU-2022:2663-1","SUSE-SU-2022:2664-1","openSUSE-SU-2022:2663-1","openSUSE-SU-2024:12168-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33068.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33068.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FQBJ24W6TXLSAQWCFW7IBGUMX4AJI3S4/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQMEXOVDL3T2UXKBCON7JSOCE646G7HG/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56WTC5IY4EIUHVUIHMCXA3BSBZLSZCI/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33068"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202209-11"},{"type":"REPORT","url":"https://github.com/harfbuzz/harfbuzz/issues/3557"},{"type":"FIX","url":"https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/harfbuzz/harfbuzz","events":[{"introduced":"aee123fc83388b8f5acfb301d87bd92eccc5b843"},{"fixed":"62e803b36173fd096d7ad460dd1d1db9be542593"}],"database_specific":{"cpe":"cpe:2.3:a:harfbuzz_project:harfbuzz:4.3.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.3.0"},{"last_affected":"4.3.0"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["4.3.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-33068.json","vanir_signatures_modified":"2026-08-12T13:32:55Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["189741007956986259831449181766921563166","174860539934597271047022014970797353491","268384559524554595331797354405313115461"],"threshold":0.9},"id":"CVE-2022-33068-edb39a93","signature_type":"Line","signature_version":"v1","source":"https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593","target":{"file":"src/hb-ot-color-sbix-table.hh"}}]}}],"schema_version":"1.9.0"}