CVE:CVE-2022-33068
CNNVD:CNNVD-202206-2261
HarfBuzz是一款用于OpenType字体的文本引擎。
HarfBuzz v4.3.0版本存在安全漏洞，该漏洞源于 hb-ot-shape-fallback.cc 组件中的整数溢出允许攻击者通过未指定的向量导致拒绝服务 (DoS)。
solution:Upgrade harfbuzz_project harfbuzz to a higher version than 4.3.0,and avoid the version 4.3.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36