Known vulnerabilities in HarfBuzz
Vendor:
Freedesktop.org
Software:
HarfBuzz
Software CPE:
cpe:2.3:a:freedesktop_org:harfbuzz:*:*:*:*:*:*:*:*
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
14.3.1
14.3.0
14.2.1
14.2.0
14.1.0
14.0.0
13.2.1
13.2.0
13.1.1
13.1.0
13.0.1
13.0.0
12.3.2
12.3.1
12.3.0
12.2.0
12.1.0
12.0.0
11.5.1
11.5.0
11.4.5
11.4.4
11.4.3
11.4.2
11.4.1
11.4.0
11.3.3
11.3.2
11.3.1
11.3.0
999.999.999
11.2.1
11.2.0
11.1.0
11.0.1
11.0.0
10.4.0
10.3.0
10.2.0
10.1.0
10.0.1
10.0.0
9.0.0
8.5.0
8.4.0
8.3.1
8.3.0
8.2.2
8.2.1
8.2.0
8.1.1
8.1.0
8.0.1
8.0.0
7.3.0
7.2.0
7.1.0
7.0.1
7.0.0
6.0.0
5.3.1
5.3.0
5.2.0
5.1.0
5.0.1
5.0.0
4.4.1
4.4.0
4.3.0
4.2.1
4.2.0
4.1.0
4.0.1
4.0.0
3.4.0
3.3.2
3.3.1
3.3.0
3.2.0
3.1.2
3.1.1
3.1.0
3.0.0
2.9.1
2.9.0
2.8.2
2.8.1
2.8.0
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.3
2.5.2
2.5.1
2.5.0
2.4.0
2.3.1
2.3.0
2.2.0
2.1.3
2.1.2
2.1.1
2.1.0
2.0.2
2.0.1
2.0.0
1.9.0
1.8.8
1.8.7
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.3
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.8
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.3
1.1.2
1.1.1
1.1.0
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.9.42
0.9.41
0.9.40
0.9.39
0.9.38
0.9.37
0.9.36
0.9.35
0.9.34
0.9.33
0.9.32
0.9.31
0.9.30
0.9.29
0.9.28
0.9.27
0.9.26
0.9.25
0.9.24
0.9.23
0.9.22
0.9.21
0.9.20
0.9.19
0.9.18
0.9.17
0.9.16
0.9.15
0.9.14
0.9.13
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.6.0
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128345 - NULL Pointer Dereference CVE-2026-22693 |
CWE-476 | Medium | 12.3.0 | 28.04.2026 |
SB2026042873 SB20260428154 SB20260428156 and 4 more |
||
| #VU128344 - Stack-based buffer overflow |
CWE-121 | Medium | 11.3.0 | 28.04.2026 |
SB2026042872 |
||
| #VU102297 - Heap-based Buffer Overflow CVE-2024-56732 |
CWE-122 | High | 10.2.0 | 03.01.2025 |
SB2025010311 SB2025010321 SB2025011062 and 1 more |
||
| #VU78910 - Stack-based buffer overflow |
CWE-121 | High | 8.1.1 | 03.08.2023 |
SB2023080317 |
||
| #VU72050 - Improper input validation CVE-2023-25193 |
CWE-20 | Medium | 7.0.0 | 08.02.2023 |
SB2023020843 SB2023041464 SB2023060525 and 80 more |
||
| #VU69668 - Out-of-bounds read CVE-2015-9274 |
CWE-125 | Medium | 1.0.4 | 29.11.2022 |
SB2018111513 SB2022112913 |
||
| #VU67642 - Out-of-bounds write CVE-2021-45931 |
CWE-787 | High | 2.9.1 | 26.09.2022 |
SB2022010101 SB2022092629 SB2024080690 and 3 more |
||
| #VU65442 - Integer overflow CVE-2022-33068 |
CWE-190 | Medium | 4.4.0 | 19.07.2022 |
SB2022071913 SB2022071915 SB2022080431 and 15 more |