### [CVE-2024-56732](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56732)
![](https://img.shields.io/static/v1?label=Product&message=harfbuzz&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%208.5.0%2C%20%3C%3D%2010.0.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-122%3A%20Heap-based%20Buffer%20Overflow&color=brightgreen)

### Description

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function.

### POC

#### Reference
- https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-qmp9-xqm5-jh6m

#### Github
No PoCs found on GitHub currently.