Critical Null Pointer Issue in HarfBuzz Affects Fedora 42 and 43

Critical Null Pointer Issue in HarfBuzz Affects Fedora 42 and 43

First seen 26 Jan 2026, 10:50 UTC Linuxsecurity 37.2

Article Content

Browse articles
ThreatCluster

A critical null pointer dereference vulnerability, identified as CVE-2026-22693, affects the HarfBuzz implementation in Fedora 42 and 43. Backport patches have been released to address this issue, with Fedora 42 receiving its update on January 17, 2026, and Fedora 43 on January 14, 2026.