PT-2026-66550 · Julia · Harfbuzz Icu Jll+1

Published

2026-07-20

·

Updated

2026-07-20

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb cairo glyphs from buffer function.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

JLSEC-2026-776

Affected Products

Harfbuzz Icu Jll
Harfbuzz Jll