platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Chrome | * | 42.0.2311.152 |