platform/fonts/shaping/HarfBuzzShaper.cpp in Blink as used in Google Chrome before 43.0.2357.65 does not initialize a certain width field which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.