CVE-2026-0943

ALTO 7.5CVE-2026-0943 · Published 19/01/2026 · updated 17/06/2026

En resumen

CVE-2026-0943 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a harfbuzz (jv).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.49%, mayor que el 42.6% de las vulnerabilidades.
Solución: actualizar a 0.032 o posterior.

Package	Affected versions	Patched versions
harfbuzz jv	`< 0.032`	`0.032`

Description

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CVE-2026-22693.

References

bugzilla.redhat.com/show_bug.cgi · Third Party Advisory
metacpan.org/release/JV/HarfBuzz-Shaper-0.032/changes · Product
cve.org/CVERecord · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free