Description (CNA)
HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CVE-2026-22693.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| JV / HarfBuzz::Shaper | affected 0 before 0.032 |
CWE
CWE-1395
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2429296
- https://www.cve.org/CVERecord?id=CVE-2026-22693
- https://metacpan.org/release/JV/HarfBuzz-Shaper-0.032/changes
ADP enrichment
No English description supplied.
No references supplied.