A NULL pointer dereference vulnerability exists in HarfBuzz versions 8.0.0 through 14.6.0 in the experimental WebAssembly shaper. This vulnerability can cause a denial of service (DoS) when a crafted font with an embedded WebAssembly module is used. The vulnerability's impact requires verification from official sources, and defenders should assess exposure and prioritize patching or mitigation. The CVE Pr [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-20T15:40:40.379Z and has not been modified since then. The vulnerability exists in HarfBuzz versions 8.0.0 through 14.6.0, affecting systems and applications that utilize this library. Defenders should assess exposure and prioritize patching due to the out-of-bounds write vulnerability in the experi [truncated]
