Harfbuzz Project / Harfbuzz
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-22693 | Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS | MEDIUM | 5.3 | Jan 10, 2026 |
| CVE-2024-56732 | HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer | CRITICAL | 9.3 | Dec 27, 2024 |
| CVE-2023-25193 | harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks | HIGH | 7.5 | Feb 4, 2023 |
| CVE-2022-33068 | harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc | MEDIUM | 5.5 | Jun 22, 2022 |
| CVE-2021-45931 | harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set | MEDIUM | 6.5 | Dec 31, 2021 |
| CVE-2015-9274 | harfbuzz: DoS due to GPOS and GSUB table mishandling | MEDIUM | 6.5 | Nov 15, 2018 |
| CVE-2015-8947 | chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6 | HIGH | 7.6 | Jul 19, 2016 |
| CVE-2016-2052 | chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6 | HIGH | 7.6 | Jan 25, 2016 |
Showing 1 to 8 of 8 CVEs