[{"CVE":"CVE-2019-1010238","severity":"important","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2019:3234","RHSA-2019:2571","RHSA-2019:2582"],"bugzilla":"1737785","bugzilla_description":"CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["pango-0:1.42.4-3.el7_6","pango-0:1.42.4-5.el8_0","pango-0:1.42.4-4.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15120","severity":"moderate","public_date":"2018-08-20T00:00:00Z","advisories":[],"bugzilla":"1613550","bugzilla_description":"CVE-2018-15120 pango: application crash triggered by unicode chars in pango-emoji.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2011-3922","severity":"moderate","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0880"],"bugzilla":"772125","bugzilla_description":"CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qt-1:4.6.2-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3922.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-0064","severity":"critical","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0309"],"bugzilla":"678563","bugzilla_description":"CVE-2011-0064 pango: missing memory reallocation failure checking in hb_buffer_ensure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["pango-0:1.28.1-3.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0064.json"},{"CVE":"CVE-2011-0020","severity":"moderate","public_date":"2011-01-18T00:00:00Z","advisories":["RHSA-2011:0180"],"bugzilla":"671122","bugzilla_description":"CVE-2011-0020 pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P/","CWE":"CWE-122","affected_packages":["pango-0:1.14.9-8.el5_6.2","pango-0:1.28.1-3.el6_0.3","evolution28-pango-0:1.14.9-13.el4_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0020.json"},{"CVE":"CVE-2010-0421","severity":"moderate","public_date":"2010-03-15T00:00:00Z","advisories":["RHSA-2010:0140"],"bugzilla":"555831","bugzilla_description":"CVE-2010-0421 libpangoft2 segfaults on forged font files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pango-0:1.14.9-8.el5","pango-0:1.2.5-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0421.json"},{"CVE":"CVE-2009-1194","severity":"important","public_date":"2009-05-07T00:00:00Z","advisories":["RHSA-2009:0476"],"bugzilla":"496887","bugzilla_description":"CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pango-0:1.2.5-8","pango-0:1.14.9-5.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1194.json"}]