CVE-2026-22693

Name of the Vulnerable Software and Affected Versions HarfBuzz versions prior to 12.3.0

Description HarfBuzz is a text shaping engine. A null pointer dereference issue exists in the SubtableUnicodesCache::create function, located in src/hb-ot-cmap-table.hh. The function does not verify if hb malloc returns NULL before attempting to construct an object at the returned pointer address. If hb malloc fails to allocate memory, it returns NULL, and the code then attempts to call the constructor on this null pointer, leading to undefined behavior and a Segmentation Fault. This issue was detected through simulated memory allocation failures in a fuzzing environment.

Recommendations Update to HarfBuzz version 12.3.0 or later.