ROOT-OS-DEBIAN-12-CVE-2023-25193 CVE-2023-25193 in harfbuzz - Patched by Root

Root has patched CVE-2023-25193 in the harfbuzz package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-22693 CVE-2026-22693 in harfbuzz - Patched by Root

Root has patched CVE-2026-22693 in the harfbuzz package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in Harfbuzz

An integer overflow in the hb-ot-shape-fallback.cc component of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS attack through unspecified vectors...

ROOT-OS-DEBIAN-11-CVE-2023-25193 CVE-2023-25193 in harfbuzz - Patched by Root

Root has patched CVE-2023-25193 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-22693 CVE-2026-22693 in harfbuzz - Patched by Root

Root has patched CVE-2026-22693 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-33068 CVE-2022-33068 in harfbuzz - Patched by Root

Root has patched CVE-2022-33068 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...

UBUNTU-CVE-2026-74969

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0931

Updates of 'linux', 'linux-esx', 'harfbuzz' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0931

Updates of 'harfbuzz', 'linux-esx', 'linux' packages of Photon OS have been released...

JLSEC-2026-776

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

JLSEC-2026-777

HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hbmalloc returns NULL before using placement new to construct an object at t...

RUSTSEC-2026-0206 `rustybuzz` is unmaintained

The current maintainer of rustybuzz has stated that the crate is unmaintained and will not receive further fixes or updates see the referenced issue. Alternatives - harfrust, an actively maintained and updated alternative which is part of the Harfbuzz project...

harfbuzz-stch-oob-write

HarfBuzz applystch — Integer Overflow → Heap OOB Write Cra...

Astra Linux – Vulnerability in Harfbuzz

HarfBuzz is a text shaping engine. Prior to version 12.3.0, there was a null pointer dereference vulnerability in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check whether hbmalloc returns NULL before using placement new to construct an...

Advisory ROSA-SA-2026-3272

software: harfbuzz 7.0.1 OS: ROSA-CHROME unaffected versions = harfbuzz-7.0.1-3 affected versions harfbuzz-7.0.1-3 CVE-ID: CVE-2026-22693 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A null pointer dereferencing vulnerability in HarfBuzz is related to a lack of validation of the hbmalloc return value...

The vulnerability of the SubtableUnicodesCache::create() function in the src/hb-ot-cmap-table.hh file of the HarfBuzz text conversion library allows a hacker to trigger a service failure.

The vulnerability of the SubtableUnicodesCache::create function in the src/hb-ot-cmap-table.hh file of the HarfBuzz text conversion library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures...

BIT-JRE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

PT-2026-38795

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

BIT-JAVA-MIN-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

BIT-JAVA-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...