CVE-2022-33068

gir1.2-harfbuzz-0.0: An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzzv4.3.0 allows attackers to cause a Denial of...

CVE-2022-33068 is fixed in 60 products on 1 platform, first by gir1.2-harfbuzz-0.0 2.6.4-1ubuntu4.2, released June 23, 2022. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0119
68th percentile

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzzv4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecifiedvectors.

Where it's fixed

ProductFixed inFixReleased
Linux
gir1.2-harfbuzz-0.0 · Ubuntu 20.04 LTS (focal) 2.6.4-1ubuntu4.2 gir1.2-harfbuzz-0.0 2.6.4-1ubuntu4.2 Jun 23, 2022
gir1.2-harfbuzz-0.0 · Ubuntu 22.04.1 LTS (jammy) 2.7.4-1ubuntu3.1 gir1.2-harfbuzz-0.0 2.7.4-1ubuntu3.1 Jun 23, 2022
gir1.2-harfbuzz-0.0 · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 gir1.2-harfbuzz-0.0 2.7.4-1ubuntu5 Jan 16, 2026
gir1.2-harfbuzz-0.0 · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 gir1.2-harfbuzz-0.0 2.7.4-1ubuntu5 Jan 16, 2026
harfbuzz · Debian 12.15 (bookworm) 5.2.0-2 DEBIAN-CVE-2022-33068 Jun 23, 2022
harfbuzz · Debian 13.5 (trixie) 5.2.0-2 DEBIAN-CVE-2022-33068 Jun 23, 2022
harfbuzz · Debian 14 5.2.0-2 DEBIAN-CVE-2022-33068 Jun 23, 2022
harfbuzz · RHEL 9 0:2.7.4-8.el9 RHSA-2022:8384 Nov 15, 2022
harfbuzz · almalinux 9 2.7.4-8.el9 ALSA-2022:8384 Nov 15, 2022
harfbuzz · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
harfbuzz · ol 9 0:2.7.4-8.el9 ELSA-2022-8384 Nov 22, 2022
harfbuzz · rocky 9 0:2.7.4-8.el9 RLSA-2022:8384 Nov 15, 2022
harfbuzz-debuginfo · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
harfbuzz-debugsource · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
harfbuzz-devel · RHEL 9 0:2.7.4-8.el9 RHSA-2022:8384 Nov 15, 2022
harfbuzz-devel · almalinux 9 2.7.4-8.el9 ALSA-2022:8384 Nov 15, 2022
harfbuzz-devel · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
harfbuzz-devel · ol 9 0:2.7.4-8.el9 ELSA-2022-8384 Nov 22, 2022
harfbuzz-devel-debuginfo · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
harfbuzz-icu · RHEL 9 0:2.7.4-8.el9 RHSA-2022:8384 Nov 15, 2022
harfbuzz-icu · almalinux 9 2.7.4-8.el9 ALSA-2022:8384 Nov 15, 2022
harfbuzz-icu · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
harfbuzz-icu · ol 9 0:2.7.4-8.el9 ELSA-2022-8384 Nov 22, 2022
harfbuzz-icu-debuginfo · amzn 2023 7.0.0-2.amzn2023.0.1 ALAS2023-2023-111 Feb 21, 2023
java-11-openjdk · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-demo · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-demo · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-demo-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-demo-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-demo-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-demo-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-devel · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-devel · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-devel-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-devel-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-devel-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-devel-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-headless · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-headless · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-headless-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-headless-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-headless-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-headless-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-javadoc · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-javadoc · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-javadoc-zip · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-javadoc-zip · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-jmods · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-jmods · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-jmods-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-jmods-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-jmods-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-jmods-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-src · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-src · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-src-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-src-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-src-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-src-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-static-libs · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-static-libs · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-static-libs-fastdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-static-libs-fastdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-11-openjdk-static-libs-slowdebug · RHEL 8 1:11.0.17.0.8-2.el8_6 RHSA-2022:7012 Oct 19, 2022
java-11-openjdk-static-libs-slowdebug · RHEL 9 1:11.0.17.0.8-2.el9_0 RHSA-2022:7013 Oct 20, 2022
java-17-openjdk · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-demo · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-demo · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-demo-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-demo-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-demo-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-demo-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-devel · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-devel · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-devel-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-devel-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-devel-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-devel-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-headless · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-headless · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-headless-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-headless-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-headless-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-headless-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-javadoc · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-javadoc · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-javadoc-zip · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-javadoc-zip · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-jmods · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-jmods · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-jmods-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-jmods-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-jmods-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-jmods-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-src · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-src · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-src-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-src-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-src-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-src-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-static-libs · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-static-libs · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-static-libs-fastdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-static-libs-fastdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
java-17-openjdk-static-libs-slowdebug · RHEL 8 1:17.0.5.0.8-2.el8_6 RHSA-2022:7000 Oct 19, 2022
java-17-openjdk-static-libs-slowdebug · RHEL 9 1:17.0.5.0.8-2.el9_0 RHSA-2022:6999 Oct 20, 2022
libharfbuzz-bin · Ubuntu 20.04 LTS (focal) 2.6.4-1ubuntu4.2 libharfbuzz-bin 2.6.4-1ubuntu4.2 Jun 23, 2022
libharfbuzz-bin · Ubuntu 22.04.1 LTS (jammy) 2.7.4-1ubuntu3.1 libharfbuzz-bin 2.7.4-1ubuntu3.1 Jun 23, 2022
libharfbuzz-bin · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 libharfbuzz-bin 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-bin · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 libharfbuzz-bin 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-cairo0 · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 libharfbuzz-cairo0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-cairo0 · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 libharfbuzz-cairo0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-gobject0 · Ubuntu 20.04 LTS (focal) 2.6.4-1ubuntu4.2 libharfbuzz-gobject0 2.6.4-1ubuntu4.2 Jun 23, 2022
libharfbuzz-gobject0 · Ubuntu 22.04.1 LTS (jammy) 2.7.4-1ubuntu3.1 libharfbuzz-gobject0 2.7.4-1ubuntu3.1 Jun 23, 2022
libharfbuzz-gobject0 · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 libharfbuzz-gobject0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-gobject0 · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 libharfbuzz-gobject0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-icu0 · Ubuntu 20.04 LTS (focal) 2.6.4-1ubuntu4.2 libharfbuzz-icu0 2.6.4-1ubuntu4.2 Jun 23, 2022
libharfbuzz-icu0 · Ubuntu 22.04.1 LTS (jammy) 2.7.4-1ubuntu3.1 libharfbuzz-icu0 2.7.4-1ubuntu3.1 Jun 23, 2022
libharfbuzz-icu0 · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 libharfbuzz-icu0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-icu0 · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 libharfbuzz-icu0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-subset0 · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 libharfbuzz-subset0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz-subset0 · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 libharfbuzz-subset0 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz0b · Ubuntu 20.04 LTS (focal) 2.6.4-1ubuntu4.2 libharfbuzz0b 2.6.4-1ubuntu4.2 Jun 23, 2022
libharfbuzz0b · Ubuntu 22.04.1 LTS (jammy) 2.7.4-1ubuntu3.1 libharfbuzz0b 2.7.4-1ubuntu3.1 Jun 23, 2022
libharfbuzz0b · Ubuntu 24.10 (oracular) 2.7.4-1ubuntu5 libharfbuzz0b 2.7.4-1ubuntu5 Jan 16, 2026
libharfbuzz0b · Ubuntu 25.04 (plucky) 2.7.4-1ubuntu5 libharfbuzz0b 2.7.4-1ubuntu5 Jan 16, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.