USN-7214-1
harfbuzz vulnerability
No scoreFix available
It was discovered that HarfBuzz incorrecty handled certain memory operations. A remote attacker could use this issue to cause HarfBuzz to crash, resulting in a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
harfbuzz vulnerability
It was discovered that HarfBuzz incorrecty handled certain memory operations. A remote attacker could use this issue to cause HarfBuzz to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-7214-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
harfbuzzUbuntu:24.10 |
before 9.0.0-1ubuntu0.1, plus listed versions 8.3.0-2build29.0.0-1 |
9.0.0-1ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7214-1 is a vulnerability with no CVSS score yet in harfbuzz, published January 16, 2025. No source lists public exploit code. Fixed in harfbuzz 9.0.0-1ubuntu0.1.