Harfbuzz Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 10
    Known Exploited: 0
    0
    Critical Level Threats
    5
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-113680

    HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS

    Last Modified: Oct 21, 2026
    Published: Oct 20, 2026

    CVE-2026-113679

    HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string

    Last Modified: Oct 20, 2026
    Published: Oct 20, 2026

    CVE-2026-0943

    HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability

    Last Modified: Apr 18, 2026
    Published: Jan 19, 2026

    CVE-2026-22693

    Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS

    Last Modified: Apr 18, 2026
    Published: Jan 10, 2026

    CVE-2023-25193

    harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks

    Last Modified: Mar 25, 2025
    Published: Feb 04, 2023
    Items Per Page
    Harfbuzz_Project Vulnerabilities & Security CVEs | CVE-DB