Skip to content
OpenAdvisories

Package · Ubuntu

harfbuzz

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-113679

    HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string

    HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has a wrong WAMR signature. Attackers can supply a crafted font whose wasm module places the output buff…

    harfbuzz harfbuzz harfbuzz harfbuzz Debian Ubuntu
  • High 7.5
    CVE-2023-25193

    hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…

    openjdk-lts openjdk-9 openjdk-13 openjdk11 Debian Ubuntu Alpine