CVE-2026-113679 | HarfBuzz up to 14.6.0 WebAssembly Shaper font_glyph_to_string out-of-bounds write

A vulnerability was found in HarfBuzz up to 14.6.0. It has been classified as problematic. Impacted is the function font_glyph_to_string of the component WebAssembly Shaper. Performing a manipulation results in out-of-bounds write.

This vulnerability is cataloged as CVE-2026-113679. The attack must be initiated from a local position. There is no exploit available.VulDB Recent EntriesRead More