harfbuzz

Products

ProductCVEsExploitedLatest
harfbuzz4–Oct 20, 2026

Exploited and recent CVEs

  • CVE-2026-113680 Medium 5.5 HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS 0.2%
  • CVE-2026-113679 High 7.0 HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string 0.2%
  • CVE-2026-22693 Medium 5.3 Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS 0.5%
  • CVE-2024-56732 High 8.8 HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer 0.7%