Astra Linux – Vulnerability in Harfbuzz

HarfBuzz is a text shaping engine. Prior to version 12.3.0, there was a null pointer dereference vulnerability in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check whether hbmalloc returns NULL before using placement new to construct an...

Astra Linux – Vulnerability in Harfbuzz

An integer overflow in the hb-ot-shape-fallback.cc component of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS attack through unspecified vectors...

ROOT-OS-DEBIAN-12-CVE-2023-25193 CVE-2023-25193 in harfbuzz - Patched by Root

Root has patched CVE-2023-25193 in the harfbuzz package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-22693 CVE-2026-22693 in harfbuzz - Patched by Root

Root has patched CVE-2026-22693 in the harfbuzz package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-25193 CVE-2023-25193 in harfbuzz - Patched by Root

Root has patched CVE-2023-25193 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-22693 CVE-2026-22693 in harfbuzz - Patched by Root

Root has patched CVE-2026-22693 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-33068 CVE-2022-33068 in harfbuzz - Patched by Root

Root has patched CVE-2022-33068 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...

UBUNTU-CVE-2026-74969

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

Photon OS 5.0: Harfbuzz PHSA-2026-5.0-92-0931

An update of the harfbuzz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0931. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

NewStart CGSL MAIN 6.06 : harfbuzz Vulnerability (NS-SA-2026-0052)

The remote NewStart CGSL host, running version MAIN 6.06, has harfbuzz packages installed that are affected by a vulnerability: - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs whe...

Photon OS 5.0: Harfbuzz PHSA-2026-5.0-0931

An update of the harfbuzz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0931. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0931

Updates of 'linux', 'linux-esx', 'harfbuzz' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0931

Updates of 'harfbuzz', 'linux-esx', 'linux' packages of Photon OS have been released...

JLSEC-2026-776

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...

JLSEC-2026-777

HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hbmalloc returns NULL before using placement new to construct an object at t...

RUSTSEC-2026-0206 `rustybuzz` is unmaintained

The current maintainer of rustybuzz has stated that the crate is unmaintained and will not receive further fixes or updates see the referenced issue. Alternatives - harfrust, an actively maintained and updated alternative which is part of the Harfbuzz project...

harfbuzz-stch-oob-write

HarfBuzz applystch — Integer Overflow → Heap OOB Write Cra...

K000161955: HarfBuzz vulnerability CVE-2026-22693

Security Advisory Description HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hbmalloc returns NULL before using placement n...

Advisory ROSA-SA-2026-3272

software: harfbuzz 7.0.1 OS: ROSA-CHROME unaffected versions = harfbuzz-7.0.1-3 affected versions harfbuzz-7.0.1-3 CVE-ID: CVE-2026-22693 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A null pointer dereferencing vulnerability in HarfBuzz is related to a lack of validation of the hbmalloc return value...

The vulnerability of the SubtableUnicodesCache::create() function in the src/hb-ot-cmap-table.hh file of the HarfBuzz text conversion library allows a hacker to trigger a service failure.

The vulnerability of the SubtableUnicodesCache::create function in the src/hb-ot-cmap-table.hh file of the HarfBuzz text conversion library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures...