Skip to content
OpenAdvisories

Vendor

harfbuzz

4 known vulnerabilities.

Products

harfbuzz 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-113679

    HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string

    HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has a wrong WAMR signature. Attackers can supply a crafted font whose wasm module places the output buff…

    harfbuzz harfbuzz harfbuzz harfbuzz Debian Ubuntu