CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. It affects Firefox. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2011-0064
Severity
MEDIUM
CVSS
6.8
EPSS
3.33%
Firefox
Original NVD Description
The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.