Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

HarfBuzz-Shaper

cpan

Use HarfBuzz for text shaping

View on github.com · View on metacpan.org

Security Advisories for HarfBuzz-Shaper in cpan

8 months ago

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability.  Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CV... CPANSA-HarfBuzz-Shaper-2026-0943

cpan HarfBuzz-Shaper
over 2026 years ago

When debug messaging is enabled using hb_buffer_set_message_func, a maliciously crafted font can trigger a buffer overflow using a complicated sequence lookup, leading to unauthorised overwriting of other data. CPANSA-HarfBuzz-Shaper-0000-0000-harfbuzz

cpan HarfBuzz-Shaper

Filter by Severity