VULNERABILITY INTELLIGENCE

CVE-2011-3193

CVSS score9.3 HIGH
EPSS probability7.25%
CISA KEVNot currently listed
Published2012-06-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references