Harfbuzz Project vulnerabilities

Products

• Harfbuzz 8

Newest

• harfbuzz Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS CVE-2026-22693 Fix available 5.3 MediumJanuary 10, 2026
• harfbuzz HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer CVE-2024-56732 Fix available 9.3 CriticalDecember 27, 2024
• harfbuzz project harfbuzz, fedoraproject fedora +1 more hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via... CVE-2023-25193 Fix available 7.5 HighFebruary 4, 2023
• harfbuzz project harfbuzz, fedoraproject fedora +1 more An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers... CVE-2022-33068 Fix available 5.5 MediumJune 22, 2022
• harfbuzz project harfbuzz, fedoraproject fedora +1 more HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from... CVE-2021-45931 6.5 MediumDecember 31, 2021
• harfbuzz project harfbuzz HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two... CVE-2015-9274 Fix available 6.5 MediumNovember 15, 2018
• harfbuzz project harfbuzz hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of... CVE-2015-8947 Fix available 7.6 HighJuly 19, 2016
• google chrome, harfbuzz project harfbuzz +1 more Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48... CVE-2016-2052 Fix available 7.6 HighJanuary 25, 2016