harfbuzz vulnerabilities
4 published CVEs name harfbuzz among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-113680
HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS
harfbuzz · harfbuzz
Medium6.8 - CVE-2026-113679
HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string
harfbuzz · harfbuzz
High7.3 - CVE-2026-22693
Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS
harfbuzz · harfbuzz
Medium5.3 - CVE-2024-56732
HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer
harfbuzz · harfbuzz
Critical9.3