CVE-2011-0064

The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.

Published: 2011-03-07 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-0064 is rated Moderate Risk (57.9/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 3.33%). Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2011-0064

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 3.09% 3.33% +0.24%
2 2025-09-06 2.56% 3.09% +0.53%
3 2025-03-30 — 2.56% —

Full EPSS history (12 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-0064

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.8 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 8.6 6.4 [email protected]

Weakness enumeration for CVE-2011-0064

OS Trackers for CVE-2011-0064

vendor priority summary link
debian not yet assigned CVE-2011-0064 not yet assigned priority: Debian including 1 source packages (pango1.0), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2011-0064
gentoo normal CVE-2011-0064: 1 GLSA(s) (201405-13), 1 atom(s) (x11-libs/pango); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2011-0064
redhat critical — https://access.redhat.com/security/cve/CVE-2011-0064
suse medium CVE-2011-0064 severity moderate: SUSE including 43 source package names (libpango-1_0-0-1.36.3-4.14, libpango-1_0-0-1.36.3-4.2, …), 97 product×package rows across 34 product lines (SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12 SP1, … (34 product lines)): Fixed 97. https://www.suse.com/security/cve/CVE-2011-0064/
ubuntu medium CVE-2011-0064 medium priority: Ubuntu including 1 source packages (pango1.0), 6 status rows across 6 suites (dapper, hardy, karmic, lucid, maverick, upstream): released 3, ignored 1, needs-triage 1, not-affected 1. https://ubuntu.com/security/CVE-2011-0064

NVD evaluator notes for CVE-2011-0064

Comment: Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

Affected software / configurations for CVE-2011-0064

Vendor Product Version Raw CPE
gnome pango 1.28.3 cpe:2.3:a:gnome:pango:1.28.3:*:*:*:*:*:*:*
mozilla firefox — cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

References for CVE-2011-0064

URL Tags
http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9 Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://secunia.com/advisories/43559 Vendor Advisory
http://secunia.com/advisories/43572 Vendor Advisory
http://secunia.com/advisories/43578 Vendor Advisory
http://secunia.com/advisories/43800
http://securitytracker.com/id?1025145
http://www.debian.org/security/2011/dsa-2178
http://www.mandriva.com/security/advisories?name=MDVSA-2011:040
http://www.redhat.com/support/errata/RHSA-2011-0309.html
http://www.securityfocus.com/bid/46632
http://www.ubuntu.com/usn/USN-1082-1
http://www.vupen.com/english/advisories/2011/0543 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0555 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0558 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0584
http://www.vupen.com/english/advisories/2011/0683
https://bugzilla.mozilla.org/show_bug.cgi?id=606997
https://bugzilla.novell.com/show_bug.cgi?id=672502
https://bugzilla.redhat.com/show_bug.cgi?id=678563 Patch
https://build.opensuse.org/request/show/63070 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65770
cvelogic Threat Intelligence