Known vulnerabilities in harfbuzz

Vendor: OpenAnolis
Software: harfbuzz
Software CPE: cpe:2.3:o:openanolis:harfbuzz:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting harfbuzz harfbuzz is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128345 - NULL Pointer Dereference
CVE-2026-22693		 CWE-476 Medium
No
No
 8.4.0-2, 8.4.0-3 28.04.2026 SB2026042873
SB20260428154
SB20260428156
and 5 more
#VU72050 - Improper input validation
CVE-2023-25193		 CWE-20 Medium
No
No
 2.7.4-10.0.1 08.02.2023 SB2023020843
SB2023041464
SB2023060525
and 80 more
#VU65442 - Integer overflow
CVE-2022-33068		 CWE-190 Medium
No
No
 2.7.4-8.0.1 19.07.2022 SB2022071913
SB2022071915
SB2022080431
and 15 more