[ Vendor · 2 CVEs ]
harfbuzz
CVEs affecting harfbuzz published in the last 30 days, plus any harfbuzz CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113679 | 20 Oct 2026 | CVSS 7.0 | harfbuzzHarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string… | |
| CVE-2026-113680 | 20 Oct 2026 | CVSS 5.5 | harfbuzzHarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly shaper host imports… |