harfbuzz:hb-raster-fuzzer: Crash in hb_raster_paint_radial_gradient

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6597066439852032 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-raster-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x767ea1e57920 Crash State...

harfbuzz:hb-gpu-fuzzer: Heap-buffer-overflow in hb_gpu_draw_encode

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6336503637934080 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-gpu-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

SUSE: Security Advisory (SUSE-SU-2026:20922-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

harfbuzz:hb-raster-fuzzer: Heap-buffer-overflow in hb_raster_paint_push_clip_rectangle

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4872362293264384 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-raster-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

harfbuzz:hb-vector-fuzzer: Use-of-uninitialized-value in OT::SVG::accelerator_t::make_doc_cache

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5728341490728960 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-vector-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz:hb-raster-fuzzer: Heap-use-after-free in hb_raster_image_destroy

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6718203744288768 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-raster-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

harfbuzz:hb-raster-fuzzer: Heap-use-after-free in hb_raster_image_destroy

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5078588000108544 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-raster-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

OPENSUSE-SU-2026:20409-1 Security update for harfbuzz

This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create bsc1256459. Other fixes: - Bug fixes for “AAT” shaping, and other shaping micro optimizations. - Fix a shaping...

SUSE-SU-2026:20922-1 Security update for harfbuzz

This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create bsc1256459. Other fixes: - Bug fixes for “AAT” shaping, and other shaping micro optimizations. - Fix a shaping...

SUSE-SU-2026:20762-1 Security update for harfbuzz

This update for harfbuzz fixes the following issues: Update to version 11.4.5: Security fixes: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create bsc1256459. Other fixes: - Bug fixes for “AAT” shaping, and other shaping micro optimizations. - Fix a shaping...

harfbuzz:hb-vector-fuzzer: Heap-use-after-free in hb_vector_paint_glyph

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6065382371950592 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-vector-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

harfbuzz:hb-raster-fuzzer: Stack-buffer-underflow in evaluate_color_line

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4635834988167168 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-raster-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash...

harfbuzz:hb-vector-fuzzer: Heap-buffer-overflow in hb_svg_append_with_prefix

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5448347908636672 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-vector-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 13 Crash Address:...

harfbuzz:hb-raster-fuzzer: Crash in evaluate_color_line

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5216672087867392 Project: harfbuzz Fuzzing Engine: honggfuzz Fuzz Target: hb-raster-fuzzer Job Type: honggfuzzasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ab9d62d4814...

harfbuzz:hb-vector-fuzzer: Heap-use-after-free in hb_vector_paint_glyph

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5622008821121024 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-vector-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x784387fe09...

harfbuzz:hb-raster-fuzzer: Use-of-uninitialized-value in OT::COLR::paint_glyph

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4659742604853248 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-raster-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

Amazon Linux 2023 : firefox (ALAS2023-2026-1435)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1435 advisory. HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. Th...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-051 (ALASFIREFOX-2026-051)

The version of firefox installed on the remote host is prior to 140.7.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-051 advisory. HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the...

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3171 (ALAS-2026-3171)

The version of thunderbird installed on the remote host is prior to 140.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3171 advisory. HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the...

Medium: thunderbird

Issue Overview: HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hbmalloc returns NULL before using placement new to construc...