# CVE-2026-0943

## Summary

- **CVE ID:** CVE-2026-0943
- **Severity:** UNKNOWN
- **CVSS Score:** 0
- **CWE:** CWE-1395
- **Published:** Jan 19, 2026
- **Last Modified:** Mar 12, 2026

## Description

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. 

Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CVE-2026-22693.

## Affected Products

- JV — HarfBuzz::Shaper (0)

## References

- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2429296)
- [CNA](https://www.cve.org/CVERecord?id=CVE-2026-22693)
- [CNA](https://metacpan.org/release/JV/HarfBuzz-Shaper-0.032/changes)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.44%
- **EPSS Percentile:** 37.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._