OSV-2026-53
NoneCVSS
—
EPSS
—
Published
Jan 15, 2026
CISA due date
—
The record
Heap-use-after-free in graph::LigatureSubstFormat1::shrink
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | harfbuzz | 12.3.1 | No fix |
CVSS
—
EPSS
—
Published
Jan 15, 2026
CISA due date
—
Heap-use-after-free in graph::LigatureSubstFormat1::shrink
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | harfbuzz | 12.3.1 | No fix |