OSV-2026-121
NoneCVSS
—
EPSS
—
Published
Jan 24, 2026
CISA due date
—
The record
Use-of-uninitialized-value in trySubset
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | harfbuzz | 12.3.1 | No fix |
CVSS
—
EPSS
—
Published
Jan 24, 2026
CISA due date
—
Use-of-uninitialized-value in trySubset
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | harfbuzz | 12.3.1 | No fix |