CVE-2010-0421

CVE-2010-0421 describes an array index error in the Pango library, specifically within the hb_ot_layout_build_glyph_classes function, affecting versions prior to 1.27.1. This vulnerability allows an unauthenticated, remote attacker to trigger a denial of service (application crash) by providing a specially crafted font file. The CVSS score of 4.3 indicates a medium severity, with a network attack vector and medium attack complexity, resulting in a partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.